Home › SEO Tools › Site Files & Policies
Security.txt Generator
security.txt (RFC 9116) gives security researchers a clear, standard way to reach you about vulnerabilities. Fill in your security contact and generate a valid file for your /.well-known/ folder.
Use the tool
How to use the Security.txt Generator
- Enter your security contact email or URL and an expiry date.
- Adjust any optional settings to match your page, business or campaign.
- Click the button to generate your result instantly — nothing is uploaded; the tool runs in your browser.
- Copy the result, or download it as a file where that option appears, and paste it into your site, document or campaign.
Frequently asked questions
Where does security.txt live?
At /.well-known/security.txt on your domain. Some setups also mirror it at /security.txt.
What is the expiry for?
The standard requires an Expires field so stale contacts are detectable. A year ahead is typical.
Do small sites need one?
It is good practice for any site. It costs nothing and makes responsible disclosure easy.