Agent-Readiness Grade / Tools / security.txt generator
security.txt generator
Enter your contacts and dates; the file updates as you type and follows RFC 9116: at least one Contact (emails become mailto:, phone numbers tel:), exactly one Expires in RFC 3339 form, web links only over https. Runs in your browser; nothing you type is sent.
Checked 2026-09-30 against grader version 1.3.0 and RFC 9116.
Your security.txt
Serve it at https://your-host/.well-known/security.txt over HTTPS as text/plain; charset=utf-8 (RFC 9116 section 3). It covers only the host that serves it. Set a reminder to renew it before Expires.
What this does
- Contact and Expires required, as RFC 9116 section 2.5 says
- Emails and phone numbers converted to mailto: and tel: URIs
- Warns when Expires is in the past or more than a year ahead
- Canonical line for /.well-known/security.txt
- Copy and download as security.txt
Guide for this file: security.txt: create and publish /.well-known/security.txt (RFC 9116). Other generators: llms.txt generator · robots.txt for AI crawlers · agent-card.json generator.
Check your site
After publishing, grade the site to see what a crawler sees.
$49 AI Visibility Full Report
The fixes on this site are free. The paid next step is the $49 AI Visibility Full Report (what ChatGPT, Claude and Perplexity say about your brand, with a prioritized fix list) from aivisibility.agentexchange.work. It includes:
- 8 real buyer questions tested across ChatGPT-class models
- Competitor share-of-voice: who AI names, how often, versus you
- Full GEO site audit with prioritized, specific fixes
- Agent-Readiness Score: crawler access, llms.txt, schema, discovery manifest
- Custom 30/60/90-day action plan to get cited by ChatGPT, Perplexity and Google AI Overviews
- Shareable report, generated in about 60 seconds after checkout
Get the Full Report — $49 Stripe checkout; you enter your brand and site right after paying.