SEO Report Tools

Technical SEO Files · Runs in your browser · Free

security.txt Generator

Generate a security.txt file (RFC 9116) so researchers know how to report vulnerabilities.

What this tool does

Creates the standard file with Contact and Expires fields plus optional policy and encryption links, and validates the formats.

Who should use it

Any site owner who wants a clear vulnerability-reporting channel.

How it works

Contacts must use mailto:, https: or tel: schemes. Expires defaults to one year ahead in UTC and warns if it is past or more than a year away. Output order follows RFC 9116.

How to use it

  1. Enter or paste contact in the form.
  2. Adjust the options below the main box if you need to; the defaults suit most cases. Use "Load example" to see how input should look.
  3. Press the run button. Processing happens instantly in your browser.
  4. Review the result panel, then copy or download the output if the tool offers it. Use Reset to start over.

Practical example

Contact mailto:security@example.com with a one-year expiry.

Understanding the results

Publish at /.well-known/security.txt over HTTPS; renew before it expires.

Limitations

The file is not signed by this tool; signing with PGP is optional but recommended.

Accuracy and report transparency

Results are computed in your browser from exactly what you enter. Deterministic steps (counting, parsing, encoding, validation) are verified by an automated test-suite with known answers. Where a method is a heuristic, the result panel says "estimated". No external data is used and nothing is invented.

Privacy

Your input never leaves your device for this tool. We count anonymous events (tool opened, run, copied) without storing what you typed. See the Privacy Policy.

Try these next

ads.txt ValidatorValidate ads.txt line format, relationships and duplicates before you publish the file.Security Headers CheckerCheck HSTS, CSP, X-Content-Type-Options, Referrer-Policy, Permissions-Policy and framing protection.Robots.txt GeneratorGenerate a valid robots.txt with disallow and allow rules, sitemap lines and optional blocks for AI crawlers.

Frequently asked questions

Does security.txt affect SEO?

No. It is a trust and security practice.

Is my data sent to your server?

No. This tool runs entirely in your browser, so the text or files you enter stay on your device. We do record anonymous counts of how often each tool is opened or run (no input data) to see which tools are useful.

How accurate are the results?

Counting, parsing, encoding and validation steps are deterministic and covered by automated tests with known answers. Anything based on a heuristic is labelled "estimated" in the result panel.

Is this tool really free?

Yes. There is no account, limit or paid plan. The site is supported by advertising, which is disclosed on our Advertising Disclosure page.

References