security.txt Generator

Generate a standards-compliant security.txt (RFC 9116) — the file sites publish at /.well-known/security.txt so that vulnerability reports reach the right people. Fill in your fields and get conformance-checked output you can copy or download. Everything runs locally in your browser; nothing is uploaded.

Fields

Contact *

Expires *

Acknowledgments

Canonical

Encryption

Hiring

Policy

Preferred-Languages

Conformance

Output

security.txt (RFC 9116) lists how to report security vulnerabilities for a site. It is published at /.well-known/security.txt (and optionally at the site root). Contact (a URI such as mailto:, https: or tel:) and Expires (a date that must be valid and should be in the future) are required; the rest are optional. Preferred-Languages is a comma-separated list of BCP 47 language tags. Fields are emitted in the RFC's alphabetical order. Pairs with the robots.txt and Sitemap generators. Everything runs locally — nothing leaves your browser.