Publish security.txt
Disclosure · about 5 min
In plain words
security.txt is a tiny public file that tells security researchers how to report a problem they found on your site.
What can go wrong
Low. Without it, people who find a bug may not know whom to tell — or may post it publicly.
How to fix it
Pick the platform your site runs on. Not sure? Forward this page to whoever manages your website.
File: /.well-known/security.txt
Contact: mailto:security@yourdomain.com
Expires: 2027-12-31T23:59:59Z
Preferred-Languages: en, id
Policy: https://yourdomain.com/securityBefore you change anything: Update the Expires date at least once a year.
Check that it worked
Open https://yourdomain/.well-known/security.txt, then re-run the ProbeHunt check.