SaaS Ranking

security.txt (RFC 9116)

It tells a researcher where to report a vulnerability instead of guessing.

Weight in the overall score: 1. See how we score · back to all criteria.

Published

Served at /.well-known/security.txt.

VendorCategorySource
1Password Password and identity https://1password.com/.well-known/security.txt
Adobe Acrobat Sign E-signature https://www.adobe.com/.well-known/security.txt
Amplitude Web analytics https://amplitude.com/.well-known/security.txt
Asana Project management https://asana.com/.well-known/security.txt
Auth0 Password and identity https://auth0.com/.well-known/security.txt
bexio Accounting https://www.bexio.com/.well-known/security.txt
Cal.com Scheduling https://cal.com/.well-known/security.txt
Calendly Scheduling https://calendly.com/.well-known/security.txt
Campaign Monitor Email marketing https://campaignmonitor.com/.well-known/security.txt
Clerk Password and identity https://clerk.com/.well-known/security.txt
CleverReach Email marketing https://cleverreach.com/.well-known/security.txt
Dashlane Password and identity https://www.dashlane.com/.well-known/security.txt
Deel HR and payroll https://www.deel.com/.well-known/security.txt
Dialpad Video conferencing https://www.dialpad.com/.well-known/security.txt
Freshworks CRM https://freshworks.com/.well-known/security.txt
Front Helpdesk https://front.com/.well-known/security.txt
fynk Contract management https://fynk.com/.well-known/security.txt
Gorgias Helpdesk https://gorgias.com/.well-known/security.txt
Greenhouse Applicant tracking https://www.greenhouse.com/.well-known/security.txt
HubSpot CRM https://www.hubspot.com/hubfs/.well-known/security.txt
Insightly CRM https://insightly.com/.well-known/security.txt
Intercom Helpdesk https://app.intercom.com/.well-known/security.txt
Jotform Surveys and forms https://www.jotform.com/.well-known/security.txt
Keeper Password and identity https://keepersecurity.com/.well-known/security.txt
LimeSurvey Surveys and forms https://www.limesurvey.org/.well-known/security.txt
Linear Project management https://linear.app/.well-known/security.txt
Livestorm Video conferencing https://livestorm.co/.well-known/security.txt
Mailchimp Email marketing https://mailchimp.com/.well-known/security.txt
Mixpanel Web analytics https://mixpanel.com/.well-known/security.txt
Okta Password and identity https://www.okta.com/.well-known/security.txt
Omnisend Email marketing https://www.omnisend.com/.well-known/security.txt
ownCloud Cloud storage https://owncloud.com/.well-known/security.txt
Payhawk Expense management https://payhawk.com/.well-known/security.txt
PostHog Web analytics https://posthog.com/.well-known/security.txt
Qualtrics Surveys and forms https://www.qualtrics.com/.well-known/security.txt
Ramp Expense management https://ramp.com/.well-known/security.txt
Rydoo Expense management https://www.rydoo.com/.well-known/security.txt
Sage Accounting https://sage.com/.well-known/security.txt
Sage HR HR and payroll https://sage.com/.well-known/security.txt
SavvyCal Scheduling https://savvycal.com/.well-known/security.txt
sevDesk Accounting https://sevdesk.de/.well-known/security.txt
Skribble E-signature https://www.skribble.com/.well-known/security.txt
Smartsheet Project management https://smartsheet.com/.well-known/security.txt
Spendesk Expense management https://www.spendesk.com/.well-known/security.txt
Teamwork Project management https://teamwork.com/.well-known/security.txt
Trello Project management https://trello.com/.well-known/security.txt
Tresorit Cloud storage https://144472103.fs1.hubspotusercontent-eu1.net/hubfs/144472103/for-dev-review/public/.well-known/security.txt
Wrike Project management https://wrike.com/.well-known/security.txt
Yousign E-signature https://youtrust.com/.well-known/security.txt
Zendesk Helpdesk https://www.zendesk.com/.well-known/security.txt
Zoho Books Accounting https://www.zoho.com/.well-known/security.txt
Zoho CRM CRM https://www.zoho.com/.well-known/security.txt
Zoho Meeting Video conferencing https://www.zoho.com/.well-known/security.txt
Zoom Video conferencing https://zoom.us/.well-known/security.txt

No security.txt found.

We reached at least one address for each of these vendors and none of them carried it. That is what we found at the addresses we checked, on the date we checked them, and not a statement about what the vendor has.

VendorCategoryWhat we checked
ActiveCampaign Email marketing 1 address checked
Acuity Scheduling Scheduling 1 address checked
Agiloft Contract management 1 address checked
Around Video conferencing 1 address checked
Ashby Applicant tracking 1 address checked
Backblaze Cloud storage 1 address checked
BambooHR HR and payroll 1 address checked
Basecamp Project management 1 address checked
Bitwarden Password and identity 1 address checked
Bookla Scheduling 1 address checked
Box Cloud storage 1 address checked
Brex Expense management 1 address checked
Capsule CRM 1 address checked
Chili Piper Scheduling 1 address checked
Circula Expense management 1 address checked
Close CRM 1 address checked
Cognito Forms Surveys and forms 1 address checked
Concord Contract management 1 address checked
Conga Contract management 1 address checked
Contractbook Contract management 1 address checked
Copper CRM 1 address checked
Crisp Helpdesk 1 address checked
Customer.io Email marketing 1 address checked
Daily Video conferencing 1 address checked
Demio Video conferencing 1 address checked
DocJuris Contract management 1 address checked
DocSend E-signature 1 address checked
DocuSign E-signature 1 address checked
Doodle Scheduling 1 address checked
Dropbox Cloud storage 1 address checked
Dropbox Sign E-signature 1 address checked
Egnyte Cloud storage 1 address checked
eversign E-signature 1 address checked
Expensify Expense management 1 address checked
Factorial HR and payroll 1 address checked
Fathom Analytics Web analytics 1 address checked
Fillout Surveys and forms 1 address checked
Formbricks Surveys and forms 1 address checked
Formstack Surveys and forms 1 address checked
Freshdesk Helpdesk 1 address checked
GoTo Video conferencing 1 address checked
Heap Web analytics 1 address checked
Help Scout Helpdesk 1 address checked
Hiver Helpdesk 1 address checked
Hotjar Web analytics 1 address checked
HR Cloud HR and payroll 1 address checked
IDrive Cloud storage 1 address checked
Ironclad Contract management 1 address checked
JazzHR Applicant tracking 1 address checked
Jitsi Video conferencing 1 address checked
Jobvite Applicant tracking 1 address checked
JumpCloud Password and identity 1 address checked
Juro Contract management 1 address checked
Kayako Helpdesk 1 address checked
Klaviyo Email marketing 1 address checked
LamaPoll Surveys and forms 1 address checked
LastPass Password and identity 1 address checked
Lever Applicant tracking 1 address checked
Lexware Office Accounting 1 address checked
LinkSquares Contract management 1 address checked
LiveAgent Helpdesk 1 address checked
luckycloud Cloud storage 1 address checked
Matomo Web analytics 1 address checked
monday.com Project management 1 address checked
Moneybird Accounting 1 address checked
Mooncard Expense management 1 address checked
Namely HR and payroll 1 address checked
Navan Expense management 1 address checked
Nextcloud Cloud storage 1 address checked
Notion Project management 1 address checked
Nutshell CRM 1 address checked
OneLogin Password and identity 1 address checked
Paperform Surveys and forms 1 address checked
pCloud Cloud storage 1 address checked
Pennylane Accounting 1 address checked
Pinpoint Applicant tracking 1 address checked
Pirsch Web analytics 1 address checked
Piwik PRO Web analytics 1 address checked
Plausible Web analytics 1 address checked
Postmark Email marketing 1 address checked
Recruitee Applicant tracking 1 address checked
Remote HR and payroll 1 address checked
Rippling HR and payroll 1 address checked
Salesforce CRM 1 address checked
Setmore Scheduling 1 address checked
Shortcut Project management 1 address checked
Sign.com E-signature 1 address checked
Signaturit E-signature 1 address checked
Simple Analytics Web analytics 1 address checked
SimplyBook.me Scheduling 1 address checked
SmartRecruiters Applicant tracking 1 address checked
softgarden Applicant tracking 1 address checked
Soldo Expense management 1 address checked
Stytch Password and identity 1 address checked
Summize Contract management 1 address checked
SurveyMonkey Surveys and forms 1 address checked
Sync.com Cloud storage 1 address checked
Tally Surveys and forms 1 address checked
Teamtailor Applicant tracking 1 address checked
Terminland Scheduling 1 address checked
TidyCal Scheduling 1 address checked
Umami Web analytics 1 address checked
Wasabi Cloud storage 1 address checked
Wave Accounting 1 address checked
Workable Applicant tracking 1 address checked
Workday HR and payroll 1 address checked
WorkOS Password and identity 1 address checked
YouCanBook.me Scheduling 1 address checked

Not measured

We could not reach these vendors, or their robots.txt asks us not to. This says something about our measurement, not about them. They are left out of the percentage above.

VendorCategoryWhy not
Breezy HR Applicant tracking The vendor’s server blocked or rate-limited our crawler, so this was not measured.
Brevo Email marketing The vendor’s server blocked or rate-limited our crawler, so this was not measured.
ClickUp Project management The vendor’s server blocked or rate-limited our crawler, so this was not measured.
Evisort Contract management None of the addresses could be reached, so this was not measured.
FreshBooks Accounting The vendor’s server blocked or rate-limited our crawler, so this was not measured.
Groove Helpdesk The vendor’s robots.txt excludes us from at least one of these addresses, so this was not measured.
Gusto HR and payroll The vendor’s server blocked or rate-limited our crawler, so this was not measured.
Height Project management None of the addresses could be reached, so this was not measured.
HiBob HR and payroll The vendor’s server blocked or rate-limited our crawler, so this was not measured.
Kit Email marketing The vendor’s server blocked or rate-limited our crawler, so this was not measured.
MailerLite Email marketing The vendor’s server blocked or rate-limited our crawler, so this was not measured.
Mailjet Email marketing This vendor was not measured because our run stopped waiting for it.
Moss Expense management The vendor’s robots.txt excludes us from at least one of these addresses, so this was not measured.
NetSuite Accounting The vendor’s server blocked or rate-limited our crawler, so this was not measured.
PandaDoc E-signature The vendor’s server blocked or rate-limited our crawler, so this was not measured.
Personio HR and payroll The vendor’s server blocked or rate-limited our crawler, so this was not measured.
Pipedrive CRM The vendor’s server blocked or rate-limited our crawler, so this was not measured.
Pleo Expense management The vendor’s server blocked or rate-limited our crawler, so this was not measured.
QuickBooks Accounting None of the addresses could be reached, so this was not measured.
signNow E-signature The vendor’s server blocked or rate-limited our crawler, so this was not measured.
SignRequest E-signature The vendor’s robots.txt excludes us from at least one of these addresses, so this was not measured.
Tidio Helpdesk The vendor’s server blocked or rate-limited our crawler, so this was not measured.
Typeform Surveys and forms The vendor’s server blocked or rate-limited our crawler, so this was not measured.
Vonage Video conferencing The vendor’s server blocked or rate-limited our crawler, so this was not measured.
Webex Video conferencing The vendor’s server blocked or rate-limited our crawler, so this was not measured.
Whereby Video conferencing The vendor’s server blocked or rate-limited our crawler, so this was not measured.
Xero Accounting The vendor’s server blocked or rate-limited our crawler, so this was not measured.

Found something we missed? Tell us and the next run picks it up.