Title: Security.txt Manager Author: handyplugins Published: 15 Yunyu 2023 Last modified: 17 Γuct 2026 --- Search plugins ![](https://ps.w.org/security-txt-manager/assets/banner-772x250.png?rev=2926329) ![](https://ps.w.org/security-txt-manager/assets/icon.svg?rev=2926329) # Security.txt Manager By [handyplugins](https://profiles.wordpress.org/handyplugins/) [Download](https://downloads.wordpress.org/plugin/security-txt-manager.1.3.1.zip) [Live Preview](https://kab.wordpress.org/plugins/security-txt-manager/?preview=1) * [Details](https://kab.wordpress.org/plugins/security-txt-manager/#description) * [Reviews](https://kab.wordpress.org/plugins/security-txt-manager/#reviews) * [Installation](https://kab.wordpress.org/plugins/security-txt-manager/#installation) * [Development](https://kab.wordpress.org/plugins/security-txt-manager/#developers) [Support](https://wordpress.org/support/plugin/security-txt-manager/) ## Description This powerful yet user-friendly WordPress plugin enables you to create, edit, and manage your « security.txt » file directly from the WordPress dashboard. As one of the most critical files on any site, the « security.txt » file communicates your security policy and contact information to security researchers. ### What is security.txt? A proposed standard which allows websites to define security policies. [Read the RFC](https://www.rfc-editor.org/rfc/rfc9116) ### Can I use this with multisite? Yes! However, if you are using a subfolder installation it will only work for the main site. This is because you can only have one `security.txt` for a given domain or subdomain per the [security.txt spec](https://www.rfc-editor.org/rfc/rfc9116#section-3.1). ### Technical Notes * Requires PHP 7.2+. * Requires WordPress 5.7+. * Rewrites need to be enabled. Without rewrites, WordPress cannot know to supply`/ security.txt` when requested. * The plugin registers rewrite rules for `/.well-known/security.txt` and `/security. txt`; server-level rules may be needed if your web server handles those paths before WordPress. * Your site URL must not contain a path (e.g. `https://example.com/site/` or path- based multisite installs). [Learn more on spec](https://www.rfc-editor.org/rfc/rfc9116#section-3.1). #### Contributing & Bug Report Bug reports and pull requests are welcome on [Github](https://github.com/HandyPlugins/security-txt-manager). **If you like Security.txt Manager, then consider checking out our other projects:** * [Powered Cache](https://poweredcache.com/) – Caching and optimization for WordPress to help improve PageSpeed and Core Web Vitals. * [Magic Login Pro](https://handyplugins.co/magic-login-pro/) – Easy, secure, and passwordless authentication for WordPress. * [SessionQuota Pro](https://handyplugins.co/sessionquota-pro/) – Limit concurrent sessions in WordPress. * [Stream Integration Pro](https://handyplugins.co/stream-integration-pro/) – Upload, sync, restore, and manage WordPress videos with Cloudflare Stream. * [Easy Text-to-Speech](https://handyplugins.co/easy-text-to-speech/) – Convert written content into high-quality synthesized speech for WordPress. * [Handywriter](https://handyplugins.co/handywriter/) – AI-powered writing assistant for WordPress. * [PaddlePress PRO](https://handyplugins.co/paddlepress-pro/) – Paddle plugin for WordPress. ## Screenshots [⌊Settings Page⌉⌊Settings Page⌉[ Settings Page ## Installation #### Manual Installation 1. Upload the entire `/security-txt-manager` directory to the `/wp-content/plugins/` directory. 2. Activate Security.txt Manager through the ‘Plugins’ menu in WordPress. ## FAQ ### How can I create security policy? You can create it on https://securitytxt.org/ website. ### Can I use this with multisite? Yes! But won’t work for the child sites on subdirectory setup due to [security.txt spec](https://www.rfc-editor.org/rfc/rfc9116#section-3.1) ### Do I have to upload any files? No. The plugin handles « .well-known/security.txt » and « security.txt » requests for your domain. ## Reviews ![](https://secure.gravatar.com/avatar/3fba1da4265dc52b24bad9557acf5ab6971570cbd96869e00b29368cafb82a46? s=60&d=retro&r=g) ### 󠀁[Perfect!](https://wordpress.org/support/topic/perfect-10011/)󠁿 [Andrzej Klasén](https://profiles.wordpress.org/bibeldans/) 18 Γuct 2023 2 replies Perfect – I'm chasing 404 ERRORs right now! ![](https://secure.gravatar.com/avatar/ee3b11a4cbd1a78f8514d6469895de5372f8fee1813581c0970a0ecab98eca08? s=60&d=retro&r=g) ### 󠀁[Great plugin!!](https://wordpress.org/support/topic/great-plugin-37030/)󠁿 [Çağdaş Dağ](https://profiles.wordpress.org/cagdasdag/) 15 Yunyu 2023 It is easy to use and solves quickly a specific problem! [ Read all 2 reviews ](https://wordpress.org/support/plugin/security-txt-manager/reviews/) ## Contributors & Developers “Security.txt Manager” is open source software. The following people have contributed to this plugin. Contributors * [ handyplugins ](https://profiles.wordpress.org/handyplugins/) * [ Mustafa Uysal ](https://profiles.wordpress.org/m_uysl/) “Security.txt Manager” has been translated into 3 locales. Thank you to [the translators](https://translate.wordpress.org/projects/wp-plugins/security-txt-manager/contributors) for their contributions. [Translate “Security.txt Manager” into your language.](https://translate.wordpress.org/projects/wp-plugins/security-txt-manager) ### Interested in development? [Browse the code](https://plugins.trac.wordpress.org/browser/security-txt-manager/), check out the [SVN repository](https://plugins.svn.wordpress.org/security-txt-manager/), or subscribe to the [development log](https://plugins.trac.wordpress.org/log/security-txt-manager/) by [RSS](https://plugins.trac.wordpress.org/log/security-txt-manager/?limit=100&mode=stop_on_copy&format=rss). ## Changelog #### 1.3.1 (17 August, 2026) * Ensured security.txt output ends with a line feed, as required by RFC 9116. #### 1.3 (10 August, 2026) * Prevented WordPress canonical redirects from adding a trailing slash to the `/ security.txt` and `/.well-known/security.txt` endpoints. Props to [@hfranz](https://profiles.wordpress.org/hfranz/). * Tested with WP 7.1 * Dependency updates. #### 1.2 (4 June, 2026) * Improved handling for `/.well-known/security.txt` and `/security.txt` requests with WordPress rewrite rules. * Added Apache and Nginx configuration examples to the settings screen for servers that handle security.txt paths before WordPress. * Hardened request URI handling for the security.txt endpoint. * Tested with WP 7.0 #### 1.1 (22 November, 2025) * Minor tweaks. * Tested with WP 6.9 * Dependency updates. #### 1.0.3 (12 April, 2025) * Tested with WP 6.8 * Dependency updates. #### 1.0.2 (19 March, 2024) * Tested with WP 6.5 * Dependency updates. #### 1.0.1 (22 July, 2023) * Tested with WP 6.3 #### 1.0 (15 June, 2023) * First release ## Meta * Version **1.3.1** * Last updated **1 n waggur ago** * Active installations **600+** * WordPress version ** 5.7 or higher ** * Tested up to **7.1.2** * PHP version ** 7.2 or higher ** * Languages * [English (US)](https://wordpress.org/plugins/security-txt-manager/), [Norwegian (Bokmål)](https://nb.wordpress.org/plugins/security-txt-manager/), [Polish](https://pl.wordpress.org/plugins/security-txt-manager/), akked [Turkish](https://tr.wordpress.org/plugins/security-txt-manager/). * [Translate into your language](https://translate.wordpress.org/projects/wp-plugins/security-txt-manager) * Tags * [responsible disclosure](https://kab.wordpress.org/plugins/tags/responsible-disclosure/) [security](https://kab.wordpress.org/plugins/tags/security/)[security.txt](https://kab.wordpress.org/plugins/tags/security-txt/) * [Advanced View](https://kab.wordpress.org/plugins/security-txt-manager/advanced/) ## Ratings 5 out of 5 stars. * [ 2 5-star reviews ](https://wordpress.org/support/plugin/security-txt-manager/reviews/?filter=5) * [ 0 4-star reviews ](https://wordpress.org/support/plugin/security-txt-manager/reviews/?filter=4) * [ 0 3-star reviews ](https://wordpress.org/support/plugin/security-txt-manager/reviews/?filter=3) * [ 0 2-star reviews ](https://wordpress.org/support/plugin/security-txt-manager/reviews/?filter=2) * [ 0 1-star reviews ](https://wordpress.org/support/plugin/security-txt-manager/reviews/?filter=1) [Your review](https://wordpress.org/support/plugin/security-txt-manager/reviews/#new-post) [See all reviews](https://wordpress.org/support/plugin/security-txt-manager/reviews/) ## Contributors * [ handyplugins ](https://profiles.wordpress.org/handyplugins/) * [ Mustafa Uysal ](https://profiles.wordpress.org/m_uysl/) ## Support Issues resolved in last two months: 1 out of 1 [View support forum](https://wordpress.org/support/plugin/security-txt-manager/) ## Donate Would you like to support the advancement of this plugin? [ Donate to this plugin ](https://handyplugins.co/donate/)