VELLACI
Assess readiness

Definition

security.txt

A standard text file at /.well-known/security.txt telling researchers how to report vulnerabilities (RFC 9116).

A machine-readable file defined by RFC 9116, served at /.well-known/security.txt, containing at least a Contact and an Expires field, optionally a Policy link, preferred languages, acknowledgements and a canonical URL. It is the simplest way to satisfy the CRA's requirement for a published contact point for vulnerability reports and is checked automatically by researchers and scanners.

Reference: RFC 9116 · Regulation (EU) 2024/2847 on EUR-Lex

Updated 2026-09-12 · Paraphrase for orientation, not legal advice.

In practice

Related terms

See the term as a workflow.

Vellaci turns each of these definitions into a record with an owner, a timestamp and evidence.

Assess my CRA readinessAll terms