$loading...
Build a valid RFC 9116 /.well-known/security.txt file. Add Contact, Expires, Encryption, Canonical, Policy and more, with live validation of required fields and URI formats.
# security.txt — RFC 9116 # Generated for authorized vulnerability disclosure on systems you own or are permitted to test. Contact: mailto:[email protected] Expires: 2026-12-19T06:27:00Z
Host at https://example.com/.well-known/security.txt (a legacy copy at /security.txt is also permitted). Sign it with PGP for integrity when handling sensitive disclosures.