thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Application & OT Security · Intermediate

security.txt

A standard file (RFC 9116) placed at /.well-known/security.txt that tells researchers how to report security vulnerabilities to an organization.

Definition

Required fields are Contact and Expires; optional fields include Encryption, Policy, Acknowledgments and Preferred-Languages. It supports coordinated vulnerability disclosure by making the reporting channel easy to find.

Example

https://example.com/.well-known/security.txt lists Contact: mailto:security@example.com and a link to the disclosure policy.

Exam tip

RFC 9116; Contact and Expires are mandatory.

Related terms