security.txt and VDP generator

Generate an RFC 9116 security.txt file from your contact, policy and expiry details. Runs in your browser; nothing is uploaded.

Contact (email or URL, required by RFC 9116)Vulnerability disclosure policy URLCanonical URL of this fileExpires (required by RFC 9116 — the file must be refreshed before this date)Preferred languages (comma-separated)

Contact: mailto:[email protected]
Preferred-Languages: en

RFC 9116 requires both Contact and Expires — fill in both before copying or downloading.

Host the downloaded file at /.well-known/security.txt on your own domain.