security.txt generator (RFC 9116), free, in your browser

security.txt generatorCreate a valid security.txt file (RFC 9116) with Contact, Expires, Policy and the other fields. Runs in your browser; nothing is sent. Where to host it and how it relates to the CRA.This site needs JavaScript for the scope checker and the waitlist form.

Home
Does the CRA apply to your product?
The Shieldbook kit
Free sample: the disclosure policy template (K03)
About Shieldbook
Cyber Resilience Act guides
CRA checklist for small teams (by article, dated)
CRA for firmware and IoT makers: classes, CE marking and the declaration of conformity
The EU Cyber Resilience Act (CRA) for mobile apps: what app makers must do and by when
Does the Cyber Resilience Act apply to SaaS?
CRA and open source: what maintainers, stewards and small commercial projects owe
CRA vulnerability reporting: the 24-hour, 72-hour and final report, explained
CRA SBOM requirements: what you must have, which format, what is not required
How to write a vulnerability disclosure policy and a security.txt for the CRA
Free tools
security.txt generator
SBOM-in-CI snippet generator
Privacy notice
Vulnerability disclosure policy
Contact us
Licence
Refund policy
Terms of sale