RFC 9116

security.txt Configuration Creator

Generate compliant security.txt files following RFC 9116 standards for vulnerability disclosure coordination.

Configuration Fields

Contact (Required)

Expires (Required)

Encryption URL

Acknowledgments URL

Preferred Languages

Canonical URL

Policy URL

Hiring URL

Contact: 
Expires: 
Encryption: 
Acknowledgments: 
Preferred-Languages: 
Canonical: 
Policy: 
Hiring:

Place the file at/.well-known/security.txt

Must be accessible via HTTPS from your domain root

Set appropriate Content-Type header

Content-Type: text/plain; charset=utf-8

Keep the Expires field updated

Renew before expiration to maintain validity

auto.tools.securitytxt.page.checklist.contact

auto.tools.securitytxt.page.checklist.expires

auto.tools.securitytxt.page.checklist.fileAccessible

auto.tools.securitytxt.page.checklist.contentType

auto.tools.securitytxt.page.checklist.fileSize

auto.tools.securitytxt.page.checklist.lineEndings

auto.tools.securitytxt.page.checklist.noComments

auto.tools.securitytxt.page.checklist.caseInsensitive