Glossary: Governance, Risk and Compliance

security.txt

Also written: /.well-known/security.txt, Contact, Expires, mailto:

A small text file at `/.well-known/security.txt`, defined by RFC 9116, that tells finders how to report flaws. It needs at least one Contact written as a link (mailto:, https: or tel:) and exactly one Expires date, which should be less than a year away.