Free tool

security.txt generator

A security.txt file gives researchers a legitimate, trusted way to report vulnerabilities directly to you — instead of posting them publicly or not reporting at all. Fill this out, publish the result at /.well-known/security.txt, and you're covered per RFC 9116.

Contact (email or URL) *

Your domain

Expires

Disclosure policy URL

Acknowledgments URL

PGP / encryption key URL

Preferred languages

/.well-known/security.txt

Expires: 2027-08-16T00:00:00.000Z
Preferred-Languages: en

Want help triaging what comes in? We'll set up a full VDP and handle your first 25 reports for free.

Set up your free VDP →