lochmueller/securitytxt

security.txt integration

0.1.0 2025-08-19 08:40 UTC

Requires

• php: ^8.3
• typo3/cms-core: ^13.4

Requires (Dev)

• friendsofphp/php-cs-fixer: ^3.84

GPL-2.0-or-later

README

This TYPO3 extension provides support for the security.txt standard, which defines a standard way for security researchers to report security vulnerabilities.

By adding a /.well-known/security.txt file to your TYPO3 installation, this extension helps your project communicate a clear and standardized security contact policy.

Features

• Automatically serves a /.well-known/security.txt file.
• Support multi tenant installations.
• Fully compliant with the RFC 9116 specification.
• Easy configuration through TYPO3 backend.
• Supports multiple contact methods (email, URL, etc.).

Installation

Install the extension via Composer:

composer require lochmueller/securitytxt

More information

• https://www.rfc-editor.org/rfc/rfc9116
• https://securitytxt.org/
• https://de.wikipedia.org/wiki/Security.txt

Open @todo

• Add to https://securitytxt.org/projects