security.txt published
/.well-known/security.txt is available.
Why it matters
The file is the standard place to publish a security contact.
What to do
Check the Contact and Expires results. Presence alone is not a complete file.
Reference
A published security.txt supports coordinated vulnerability disclosure.