Content is loading…
Generate an RFC 9116 security.txt file for responsible vulnerability disclosure.
# security.txt — RFC 9116 # https://securitytxt.org/ Contact: mailto:security@example.com Expires: 2027-09-05T00:00:00.000Z Preferred-Languages: en Canonical: https://example.com/.well-known/security.txt
Publish this file at https://yourdomain.com/.well-known/security.txt (RFC 9116). Set the Canonical field above to that exact URL.
Generate a standards-compliant security.txt file (RFC 9116) that tells security researchers how to report vulnerabilities on your site. Add contact methods, an expiry date, your PGP key, and policy links, then download or copy the file ready to publish at /.well-known/security.txt.
The security.txt Generator simplifies the creation of a standards-compliant security.txt file according to RFC 9116 specifications. It allows web administrators to quickly assemble essential vulnerability reporting details—such as contact methods, PGP keys, and expiration dates—without needing to manually write or format the file. Being completely free and browser-based, it provides a fast and straightforward way to prepare the file for publication in the standard /.well-known/ location.
Good to know: This tool generates the static text file only and does not host the file, verify PGP key validity, or manage ongoing vulnerability reports.
Create a standards-compliant RFC 9116 security.txt file to define your vulnerability disclosure policy and contact methods.
Enter your security contact information
Provide an email address or a link to a contact form where security researchers can report vulnerabilities. This is a required field for RFC 9116 compliance.
Set an expiration date
Select a date when the security.txt file will expire. It is recommended to set this no more than one year into the future to ensure information stays current.
Add optional policy and PGP links
Include links to your responsible disclosure policy, your PGP public key for encrypted communication, and any relevant hiring or acknowledgement pages.
Generate and copy the file content
Click the generate button to create the formatted text. Copy the output or download the file directly to your local machine.
Publish to the well-known directory
Upload the generated file to your web server at the /.well-known/security.txt path. This standard location allows automated tools and researchers to find your policy easily.
Estimated time: PT2M
Share this tool
Generate a robots.txt file with crawl rules and sitemap.
Build Content Security Policy headers visually with live preview and presets.
Check SSL/TLS certificate details and expiry for any domain.
Generate strong, customizable secure passwords instantly.
Generate MD5, SHA-1, SHA-256, SHA-512 hashes from text.
Encode and decode text with ROT13, Caesar, Atbash, and Vigenère ciphers.
Check password strength: entropy, crack time, patterns, and breach check.
AES-256-GCM encrypt and decrypt text with a passphrase — runs in your browser.
Generate HMAC-SHA256/512 signatures for API authentication and webhooks.
Convert text or Markdown to a Word .docx file with live preview, RTL, and page-setup options.
Draw a Secret Santa with exclusions and share a private reveal link for each person.
Make custom bingo cards from your own words — play, print, or share a link.
Convert images to video with the Ken Burns zoom/pan effect. Add music and export as WebM.
Load and compare multiple URLs side by side in resizable iframes.
Rank anything with quick 1-v-1 matchups → a full ordered list you can share.
Convert Markdown to a fully customized, RTL-ready PDF.
See your public IP address plus full location, ISP, ASN, timezone, coordinates, and more.
