generated: '2026-07-21' method: searched source: live probe of /.well-known/ on thetileapp.com host: https://thetileapp.com hosts: - host: https://thetileapp.com documents: - path: /.well-known/security.txt status: 200 note: RFC 9116 security.txt is served and was parsed by the security-programs probe (Contact hackerone.com/life360 + responsibledisclosure@life360.com). Raw verbatim capture is gated behind Cloudflare bot protection, so no raw file is stored; the parsed contacts live in security/thetileapp-vulnerability-disclosure.yml. - path: /.well-known/openid-configuration status: 404 - path: /.well-known/oauth-authorization-server status: 404 - path: /.well-known/api-catalog status: 404 - path: /.well-known/ai-plugin.json status: 404 x-shape-fix: converted: '2026-08-20' from: documents note: Rewritten into hosts[] -> documents[], the only shape well_known_docs() in score.rb reads. A served .well-known surface recorded in any other shape scores as absent.