Skip to content

security.txt without or with an expired Expires

Scan rule · RSC-SEC-094

  • Security
  • Severity: Low
  • CWE-1059

Checks whether the existing security.txt carries the mandatory `Expires:` line and whether that date is still in the future.

Scan tier

  • External scan (anonymous)

How to fix it

Set `Expires:` to a date at most one year ahead and put the renewal in the calendar.

Scan your own app for free