ffee All tools
EN 中文 FR DE

Security.txt Generator

Build a security.txt file so researchers know exactly how to report a vulnerability in your site.

Build a security.txt file

Contacts: 0
Contact list: none
Upload the finished file to the well known folder on your domain so researchers can find it.

How to use the Security.txt Generator

  1. Add one or more contact addresses for security reports.
  2. Set the expiry date and fill in the optional policy and language fields.
  3. Copy the file to the well known folder on your domain.

Features

Advertisement

More tools

Robots.txt Generator Sitemap Generator Ads.txt Generator Humans.txt Generator Web Manifest Generator Favicon HTML Generator RSS Feed Generator Redirect Generator CSP Header Generator HTTP Header Builder Htaccess Generator Social Share Link Generator

Frequently Asked Questions

Common questions about the free online security.txt generator.

It is a standard file where researchers find the right way to report a vulnerability in your site, with contact details and a policy.
The recommended location is the well known folder on your domain, at your domain followed by /.well-known/security.txt.
The contact field and the expires field are required. Everything else, such as policy or language, is optional.
Use a mailto address or a web address that reaches your security team, for example mailto:[email protected].
Every file must state an expiry date so researchers know the information is current. Update the date and re-upload before it passes.
It points to the permanent address of the file, which helps when your security.txt is also served from other locations.
Yes. Add as many contact lines as you need and the generator writes one line for each address in the order you added them.
No. It is a discovery aid. A bug bounty programme still needs its own rules, scope and reward details.

Last updated: October 10, 2026