Security.txt Generator
Generate a valid RFC 9116 /.well-known/security.txt file.
Fields
At least one Contact field is required
Email, URL or phone; mailto:/tel:/https:// prefix recommended
ISO 8601 date/time; required by the spec
security.txt
Publish this at /.well-known/security.txt
About the Security.txt Generator
Build a standards-compliant security.txt file per RFC 9116, with Contact, Expires, Encryption, Acknowledgments, Policy, Hiring, and Preferred-Languages fields, ready to publish at /.well-known/security.txt.
Examples
Basic file
Contact: mailto:security@example.comOutput
Contact: mailto:security@example.com
Expires: 2027-08-06T00:00:00ZRelated tools
CORS Config Generator
Security
Generate CORS headers/config for Nginx, Apache, Express, or Workers.
CSP Builder
Security
Build a Content-Security-Policy header from per-directive sources.
Htpasswd Generator
Security
Generate .htpasswd lines using SHA-1 or plain text.
JWT Inspector
Security
Decode a JWT and audit its claims for common issues.
Password Strength Checker
Security
Estimate password entropy, crack time, and get actionable advice.
Robots.txt Security Checker
Security
Scan robots.txt for accidental disclosure of sensitive paths.
Frequently asked questions
Version 1.0.0 · Updated 2026-08-06 · Runs entirely in your browser