security.txt missing Contact
security.txt is present but has no Contact field.
Why it matters
Contact is the field researchers use to reach you. Without it the file does not do its job.
What to do
Add Contact: mailto:security@your-domain.
Reference
A published security.txt supports coordinated vulnerability disclosure.