SaaS Ranking

security.txt (RFC 9116) in Learning management

It tells a researcher where to report a vulnerability instead of guessing.

12% here against 23% across every category we measure. Learning management sits below the overall share for this criterion.

Back to security.txt (RFC 9116) across all categories, or to Learning management.

Published

Served at /.well-known/security.txt.

VendorWhat we found
Anthology https://www.blackboard.com/.well-known/security.txt
Articulate https://www.articulate.com/.well-known/security.txt
Instructure https://www.instructure.com/.well-known/security.txt

No security.txt found.

We reached at least one address for each of these vendors and none of them carried it. That is what we found at the addresses we checked, on the date we checked them, and not a statement about what the vendor has.

VendorWhat we found
Absorb LMS 1 address checked
Arlo 1 address checked
Auzmor 1 address checked
Coassemble 1 address checked
Continu 1 address checked
Cypher Learning 1 address checked
D2L 1 address checked
Docebo 1 address checked
Edmingle 1 address checked
eloomi 1 address checked
iSpring 1 address checked
Kajabi 1 address checked
Learn Amp 1 address checked
LearnWorlds 1 address checked
Litmos 1 address checked
Moodle 1 address checked
Sana 1 address checked
Skilljar 1 address checked
TalentLMS 1 address checked
Teachable 1 address checked
Thrive 1 address checked
Tovuti 1 address checked

Not measured

We could not look at these, or their robots.txt asks us not to. That says something about our measurement, not about them, and they are left out of the percentage above.

VendorWhat we found
360Learning None of the addresses could be reached, so this was not measured.
Cornerstone The vendor’s server blocked or rate-limited our crawler, so this was not measured.
Podia The vendor’s server blocked or rate-limited our crawler, so this was not measured.
Thinkific The vendor’s server blocked or rate-limited our crawler, so this was not measured.

Found something we missed? Tell us and the next run picks it up.