Security.txt RFC 9116 Generator
Free ToolCreate a standardized security.txt vulnerability disclosure file conforming to RFC 9116 with contact emails, PGP keys, policy links, and acknowledgments.
Instant 0ms
100% Client-Side
IETF RFC 9116 Standard
Security.txt Generator
Create an RFC 9116 compliant security.txt file to allow white-hat security researchers to report vulnerabilities responsibly.
RFC 9116 Directives
Must start with `mailto:` or `https://`.
Recommended duration is typically 6 to 12 months in the future.
Generated security.txt
???? Where to publish this file:
Upload this file to your web server at:
https://yourdomain.com/.well-known/security.txt
Frequently Asked Questions
Defined by IETF RFC 9116, security.txt provides security researchers and ethical white-hat hackers with a standard way to report security vulnerabilities responsibly.
It must be served at either `/.well-known/security.txt` or `/security.txt` over HTTPS.