We did something similar few days ago. https://cradata.eu/datasets#cra-exposure-study-2026 https://cradata.eu/datasets#cra-exposure-study-2026 Almost identical

We did something similar few days ago. https://cradata.eu/datasets#cra-exposure-study-2026 https://cradata.eu/datasets#cra-exposure-study-2026 Almost identical results: Across all 342 manufacturers Publish a valid RFC 9116 security.txt 24 of 342 or 7% Publish any security.txt 34 of 342 or 9.9% Publish a discoverable CVD policy20 of 342 or 5.8% Publish neither, confirmed by observation 257 of 342 or 75.1%