security.txt Generator
Generate a RFC 9116 security.txt file in your browser. No upload, no signup.
security.txt workspace
Generate a standards-friendly /.well-known/security.txt file.
Disclosure details
Generate a standards-friendly file for /.well-known/security.txt.
Optional fields
Generated file
Output
Questions
What is security.txt?
security.txt is a text file placed at /.well-known/security.txt to tell researchers how to report vulnerabilities responsibly.
Which fields are required?
A practical security.txt should include at least Contact and Expires. Optional fields can add policy, encryption, acknowledgments, canonical URL, languages, and hiring links.
Where do I upload it?
Publish the generated text at /.well-known/security.txt on your domain and make sure it is served over HTTPS.
Does Utilumo upload my input?
No. This tool is designed for local browser processing and does not send your input to a server.
Do I need an account?
No. Utilumo tools are built to work without accounts or sign-in.