A FOCUSED WORKSPACE · LOCAL PROCESSING

Security.txt Generator

Prepare a vulnerability-reporting contact file with required contacts, an expiration timestamp and an optional policy link.

1. Prepare your input

Contact URIs, one per lineOpen UTF-8 text file

Expiration (UTC timestamp)Open second text file

Publish at /.well-known/security.txt over HTTPS. This unsigned draft does not create a vulnerability disclosure policy or bounty program.

Up to 250,000 characters per input · UTF-8 files up to 500 KB · 15-second processing limit. Inputs are processed in a local worker; no processing upload.

2. Review & export

Try the example or enter your own input.

Result

A clear workflow

Try the example to understand the expected input, or open a UTF-8 text file.
Choose the settings and run the tool. Review both the result and any limitations shown below it.
Copy or download the result. Download the report for a separate record of the findings.

Publish at /.well-known/security.txt over HTTPS. This unsigned draft does not create a vulnerability disclosure policy or bounty program.

Related workflow: robots txt generator. Files and results are not saved automatically; download anything you want to keep.

Using Security.txt Generator

Prepare a vulnerability-reporting contact file with required contacts, an expiration timestamp and an optional policy link.

Load the example or paste contact uris, one per line.
Choose settings, run locally and review warnings.
Copy or download the result and the optional JSON report.

Example

mailto:security@example.com

Questions & answers

What does this tool do?

Prepare a vulnerability-reporting contact file with required contacts, an expiration timestamp and an optional policy link.

What should I check before using the result?

Publish at /.well-known/security.txt over HTTPS. This unsigned draft does not create a vulnerability disclosure policy or bounty program.

Is there an upload or installation?

Processing runs in a local browser worker with no processing upload. No account or installation is required. Website ads and analytics follow the site privacy policy.

What input sizes are supported?

Each input supports 250,000 UTF-16 units and UTF-8 files up to 500 KB. Jobs stop after 15 seconds. Report previews show 200 rows; downloaded reports include all computed rows.

Will my work be saved?

No automatic storage is used. Download the result and report before leaving. Changing input invalidates previous output.