Your files stay on your device

Security.txt generator

Fill in contacts and an expiry date, add optional fields where you have them, and get an RFC 9116 security.txt ready to publish.

Add a contact and an expiry date to build the file.

This builds the file text only. It does not host anything and does not check your site, so after download the file still needs to land at /.well-known/security.txt and be served with the content type text/plain; a copy at /security.txt is a common fallback once the well-known location works. The expiry findings compare against your own clock at build time.

CSP evaluator & builder
HTTP header parser

All web & auth tools

Was this tool useful?

Security.txt generator

More web & auth tools