Web Security · Senior · Question 73 of 75
What is /.well-known/security.txt for?
- 1Listing all the security headers the site uses
- ✓Correct answer: Telling security researchers how to report vulnerabilities to you, with a contact and a policy
- 3Blocking bots from scanning the site
Explanation
A clear reporting channel (and ideally a disclosure policy or bug bounty) means you hear about issues before they're exploited.