security.txt Generator
Generate a RFC 9116 security.txt file in your browser. No upload, no signup.
security.txt workspace
Generate a standards-friendly /.well-known/security.txt file.
Disclosure details
Optional fields
Generated file
Output
Questions
What is security.txt?
security.txt is a text file placed at /.well-known/security.txt to tell researchers how to report vulnerabilities responsibly.
Which fields are required?
A practical security.txt should include at least Contact and Expires. Optional fields can add policy, encryption, acknowledgments, canonical URL, languages, and hiring links.
Where do I upload it?
Publish the generated text at /.well-known/security.txt on your domain and make sure it is served over HTTPS.
Does Utilumo upload my input?
No. Utilumo has no backend that could receive your input. Where a tool makes a request as part of its function, it goes directly from your browser to the destination you choose, never through Utilumo.
Do I need an account?
No. Utilumo tools are built to work without accounts or sign-in.