MSRXTools / Websites
security.txt generator
Write an RFC 9116 security.txt so researchers know how to report a vulnerability to you.
Runs in your browser
Loading tool…
Good to know
- Put the file at /.well-known/security.txt on every domain you run.
- Keep Expires within a year and set a reminder to renew it.
- A monitored Contact address matters more than any other field.
Related tools
Website vulnerability scanner
Paste a URL. Get a SWOT security report scored out of 10: HTTPS, TLS, headers, cookies, content, DNS and email, with fixes.Exploited vulnerabilities, last 365 days
Every vulnerability CISA confirmed as exploited in the wild in the past year, live: php2shell, React2Shell, WordPress, SharePoint, Citrix, Fortinet and more. Search and filter.Security headers analyser
Paste response headers from DevTools or curl -I and get the same header grading as the scanner, for pages we cannot reach.
Paste a URL. Get a SWOT security report scored out of 10: HTTPS, TLS, headers, cookies, content, DNS and email, with fixes.Exploited vulnerabilities, last 365 days
Every vulnerability CISA confirmed as exploited in the wild in the past year, live: php2shell, React2Shell, WordPress, SharePoint, Citrix, Fortinet and more. Search and filter.Security headers analyser
Paste response headers from DevTools or curl -I and get the same header grading as the scanner, for pages we cannot reach.