Emerald Red Team

ERT-CONFIG-015

Missing security.txt

Info

Why it matters

security.txt tells researchers how to report problems to you.

How to fix it

Publish /.well-known/security.txt with a Contact and Expires line.

How we test it

Passive — runs in the free check, looks only at what a browser can see.

Does your app have this problem?

The free Quick Check tests for it.

Scan my app — free