No Web Bot Auth JWKS at /.well-known/http-message-signatures-directory.json. Publish one to allow trusted agents while keeping a default-deny posture for the rest.
Remediation
Failing: discoverability.web_bot_auth
discoverability.web_bot_authmedium
no auto-generated snippet for this check. See remediation below.
Why and how