SaaS Ranking

security.txt (RFC 9116) in Endpoint management and security

It tells a researcher where to report a vulnerability instead of guessing.

37% here against 23% across every category we measure. Endpoint management and security sits above the overall share for this criterion.

Back to security.txt (RFC 9116) across all categories, or to Endpoint management and security.

Published

Served at /.well-known/security.txt.

VendorWhat we found
Action1 https://www.action1.com/.well-known/security.txt
AirDroid Business https://www.airdroid.com/.well-known/security.txt
Bitdefender https://bitdefender.com/.well-known/security.txt
CrowdStrike https://www.crowdstrike.com/.well-known/security.txt
Jamf https://www.jamf.com/.well-known/security.txt
Malwarebytes https://www.malwarebytes.com/.well-known/security.txt
NinjaOne https://ninjaone.com/.well-known/security.txt
Scalefusion https://scalefusion.com/.well-known/security.txt
SentinelOne https://sentinelone.com/.well-known/security.txt
Sophos https://www.sophos.com/.well-known/security.txt

No security.txt found.

We reached at least one address for each of these vendors and none of them carried it. That is what we found at the addresses we checked, on the date we checked them, and not a statement about what the vendor has.

VendorWhat we found
42Gears 1 address checked
Addigy 1 address checked
Applivery 1 address checked
Automox 1 address checked
baramundi 1 address checked
Datto 1 address checked
Esper 1 address checked
Fleet 1 address checked
Hexnode 1 address checked
Iru 1 address checked
Kaseya 1 address checked
Level 1 address checked
Miradore 1 address checked
Mosyle 1 address checked
Pulseway 1 address checked
SimpleMDM 1 address checked
Syncro 1 address checked

Not measured

We could not look at these, or their robots.txt asks us not to. That says something about our measurement, not about them, and they are left out of the percentage above.

VendorWhat we found
Atera The vendor’s server blocked or rate-limited our crawler, so this was not measured.
ESET The vendor’s server blocked or rate-limited our crawler, so this was not measured.
Faronics None of the addresses could be reached, so this was not measured.

Found something we missed? Tell us and the next run picks it up.