Your files stay on your device

Security.txt generator

Fill in contacts and an expiry date, add optional fields where you have them, and get an RFC 9116 security.txt ready to publish.

Add a contact and an expiry date to build the file.

This builds the file text only. It does not host anything and does not check your site, so after download the file still needs to land at /.well-known/security.txt and be served with the content type text/plain; a copy at /security.txt is a common fallback once the well-known location works. The expiry findings compare against your own clock at build time.
Options

More web & auth tools

- CSP evaluator & builder (/web/csp)
- HTTP header parser (/web/headers)
All web & auth tools (/web)

Was this tool useful?
YesNo

Canonical HTML: https://nutter.tools/web/security-txt-generator
Markdown version: https://nutter.tools/web/security-txt-generator.md
Plain-text version: https://nutter.tools/web/security-txt-generator.txt
Agent index: https://nutter.tools/llms.txt