Assemble a security.txt draft and validate contact and expiry fields.
DEVELOPER & CODE · LOCAL WORKBENCH · BROWSER WORKSPACE
Publish a monitored contact. Set a reminder to renew it.
Assemble a security.txt draft and validate contact and expiry fields.
{ }
01 · PUBLIC CONTACT DETAILSEDIT LOCALLY
This is a public contact file.
Only publish destinations an authorized owner has approved and someone actively monitors. Do not put secrets or private escalation details here.
02 · SECURITY.TXT DRAFTREADY TO REVIEW
INTENDED LOCATION/.well-known/security.txtfor the approved HTTPS origin
Draft generated with required Contact and Expires fields.Contact and Expires are present · all configured URLs use HTTPS
PLAIN TEXT · UTF-85 LINES
Contact: mailto:security@example.com
Expires: 2027-08-26T00:00:00Z
Preferred-Languages: en
Policy: https://example.com/security
Canonical: https://example.com/.well-known/security.txt
Before publishing
Confirm the mailbox is monitored and the policy is authorized.
Serve the UTF-8 file at the intended HTTPS well-known path.
Check status, content type, redirects, canonical scope and renewal after deployment.
This tool does not verify ownership, delivery, HTTP response or digital signatures.
◎
Runs in this browser. This creates a local draft only. Confirm every address and policy with an authorized owner, then verify HTTPS delivery and renewal outside this page.
