security.txt generator

When someone finds a security problem on your site, a security.txt file tells them how to reach you, instead of the problem going unreported. Fill this in and upload the file. Free, and nothing you enter is stored.

What security.txt is for

It's a short, standard file (RFC 9116) that people who find a security problem look for first. Without it, a well-meaning researcher may not find a way to tell you, and the problem stays open. Our free checkup flags a missing one, along with the files in our exposed files guide.