[waihtis]

That would be because I typed the url wrong, it's actually /.well-known/security.txt:

https://www.facebook.com/.well-known/security.txt

https://www.apple.com/.well-known/security.txt

https://www.amazon.com/.well-known/security.txt

https://www.google.com/.well-known/security.txt

[zamnos]

TIL! That's great!

The RFC for it came out April 22 and has backing by quite a few organizations.

https://securitytxt.org/