diff --git a/http/misconfiguration/sitecore-lfi.yaml b/http/misconfiguration/sitecore-lfi.yaml
index a0c33133b2..420efec13c 100644
--- a/http/misconfiguration/sitecore-lfi.yaml
+++ b/http/misconfiguration/sitecore-lfi.yaml
@@ -22,7 +22,9 @@ http:
       - type: word
         part: body
         words:
-          - "signedlicense id"
+          - "<signedlicense id="
+          - "<Signature"
+        condition: and
 
       - type: status
         status: