Generate RFC 9116 security.txt files with contact, policy, and expiry fields. Give researchers a reporting path — local generation, free, no signup.
Content reviewed October 2026 · About Toolzum
Parse Set-Cookie headers into structured JSON, or analyze cookie security flags (Secure, HttpOnly, SameSite, expiry). Flag missing Secure, HttpOnly, and SameSite attributes — free, local, no signup.
Generate Nginx server blocks — reverse proxy, SSL, gzip, caching headers — without syntax hunting. Ship a correct vhost first try — local generation, free, no signup.
Build IP allowlist rules for firewalls, security groups, and app configs from CIDR lists. Generate AWS, Nginx, and htaccess formats — local, free, no signup.
Generate valid robots.txt with user-agents, allows, disallows, and sitemap lines. Never accidentally deindex with Disallow: / — local generation, free, no signup.
Generate APA, MLA, Chicago, Harvard, IEEE, AMA, and Vancouver citations from fields you type — title, authors, publisher, year, URL, and DOI. Cite sources correctly in seconds — local generation, free, no signup.
Contact (email or URL) and Expires (date) — the RFC minimum. Add Encryption (key URL), Policy, and Hiring for a complete file.
At /.well-known/security.txt (plus legacy /security.txt redirect). Scanners and researchers check the well-known path first.
Without it, finders email random addresses or disclose publicly. A 5-minute file converts chaos into coordinated disclosure.
No — generation runs locally in your browser. Nothing leaves your device.