diff --git a/test/security/http_xfail.txt b/test/security/http_xfail.txt
new file mode 100644
index 0000000..a531fc3
--- /dev/null
+++ b/test/security/http_xfail.txt
@@ -0,0 +1,5 @@
+# Expected failure list for plain HTTP endpoints
+robot 30209
+message-router 30227
+sniro-emulator 30288
+aaf-fs 31115