security.txt Generator & Validator

A security.txt file (RFC 9116) tells security researchers how to report a vulnerability. Serve the result at /.well-known/security.txt.

Contact (one per line — email, URL, or phone)

ExpiresPreferred-LanguagesPolicy URLCanonical URLEncryption (key URL)Acknowledgments URLHiring URL

security.txt

Contact: mailto:security@example.com
Contact: https://example.com/security
Policy: https://example.com/security-policy
Canonical: https://example.com/.well-known/security.txt
Preferred-Languages: en

⚠ Expires is required by RFC 9116.