Checks

security.txt not reachable

The scanner could not fetch /.well-known/security.txt.

Why it matters

Researchers then have no stable contact for this host.

What to do

Publish a security.txt file, or confirm the host answers that path.

Reference

A published security.txt supports coordinated vulnerability disclosure.

RFC 9116 — security.txt