Skip to content

Scan rule · RSC-SEC-094

security.txt without or with an expired Expires

SecuritySeverity: LowCWE-1059

Checks whether the existing security.txt carries the mandatory `Expires:` line and whether that date is still in the future.

Scan tier

External scan (anonymous)

How to fix it

Set `Expires:` to a date at most one year ahead and put the renewal in the calendar.

Scan your own app for free

More rules in this dimension

RSC-SEC-001

No end-to-end HTTPS

RSC-SEC-002

HSTS header missing

RSC-SEC-003

No Content-Security-Policy

RSC-SEC-004

MIME sniffing not disabled

RSC-SEC-005

No clickjacking protection

RSC-SEC-006

CORS wildcard on the public document