generated: '2026-07-19' method: searched source: https://www.lendable.co.uk/.well-known/ host: https://www.lendable.co.uk notes: 'Lendable publishes an RFC 9116 security.txt with a security@ contact, an expiry date, preferred languages, a hiring link, and a PGP encryption key. No OAuth / OpenID Connect discovery documents are served, consistent with Lendable having no public developer API surface. ' related: - path: /llms.txt status: 200 file: ../llms/lendable-llms.txt - path: /pgp-key.txt status: 200 url: https://www.lendable.co.uk/pgp-key.txt hosts: - host: https://www.lendable.co.uk documents: - path: /.well-known/security.txt status: 200 file: lendable-security.txt standard: RFC 9116 - path: /.well-known/openid-configuration status: 404 - path: /.well-known/oauth-authorization-server status: 404 - path: /.well-known/api-catalog status: 404 - path: /.well-known/ai-plugin.json status: 404 x-shape-fix: converted: '2026-08-20' from: documents note: Rewritten into hosts[] -> documents[], the only shape well_known_docs() in score.rb reads. A served .well-known surface recorded in any other shape scores as absent.