Free tool ยท runs in your browser

security.txt and disclosure policy generator

The CRA requires a contact point for vulnerability reports and a disclosure policy. Fill in four fields and get both, ready to review and publish.

Runs in your browser. Nothing is sent to us.

Drafts to review, not legal advice. Publish security.txt at /.well-known/security.txt as plain text and renew the Expires date before it lapses. Check your site with the free scanner.