Easily improve site security with WordPress Hardening, Two-Factor Authentication (2FA), Login Protection, Vuln...
Free
3M+ installs 4.9★ (8,862)
Security.txt Manager
Create and manage your security.txt from within WordPress. The easiest way to manage security policy.
The facts
- Rating
- 5★ from 2
- Active installs
- 600+
- Price
- Free
- Last updated
- 17 Aug 2026
- Added
- Jun 2023
- Requires WP
- 5.7
- Tested up to
- WP 7.1
- Requires PHP
- 7.2
- Downloads
- 8,895
Our analysis
AI-assistedSecurity.txt Manager is a WordPress plugin that allows you to create, edit, and manage your 'security.txt' file from the WordPress dashboard. This file is important for communicating your security policies and contact information to security researchers. It is suitable for users who want to enhance their site's security visibility.
The plugin requires PHP 7.2 or higher and WordPress 5.7 or above. It supports multisite installations but only works for the main site in subfolder setups, as only one security.txt file can be used per domain or subdomain.
Best for: This plugin suits website owners looking to improve their security communication.
What it does well
- ✓Enables management of the security.txt file from the dashboard
- ✓Communicates security policies to researchers
- ✓Supports multisite installations with specific limitations
- ✓Free to use from the WordPress.org directory
Where it falls short
- •Requires PHP 7.2+ and WordPress 5.7+
- •Only works for the main site in subfolder multisite installations
- •Server-level rules may be needed for proper functionality
Verdict
Security.txt Manager provides a straightforward way to manage your security.txt file, though it has specific technical requirements and limitations for multisite use.
From the developer
handyplugins's own description of Security.txt Manager, lightly tidied.
This powerful yet user-friendly WordPress plugin enables you to create, edit, and manage your “security.txt” file directly from the WordPress dashboard. As one of the most critical files on any site, the “security.txt” file communicates your security policy and contact information to security researchers.
What is security.txt?
A proposed standard which allows websites to define security policies.
Can I use this with multisite?
Yes! However, if you are using a subfolder installation it will only work for the main site. This is because you can only have one security.txt for a given domain or subdomain per the security.txt spec.
Technical Notes
- Requires PHP 7.2+.
- Requires WordPress 5.7+.
- Rewrites need to be enabled. Without rewrites, WordPress cannot know to supply
/security.txtwhen requested. - The plugin registers rewrite rules for
/.well-known/security.txtand/security.txt; server-level rules may be needed if your web server handles those paths before WordPress. - Your site URL must not contain a path (e.g.
https://example.com/site/or path-based multisite installs). Learn more on spec.
Contributing & Bug Report
Bug reports and pull requests are welcome on Github.
If you like Security.txt Manager, then consider checking out our other projects:
- Powered Cache – Caching and optimization for WordPress to help improve PageSpeed and Core Web Vitals.
- Magic Login Pro – Easy, secure, and passwordless authentication for WordPress.
- SessionQuota Pro – Limit concurrent sessions in WordPress.
- Stream Integration Pro – Upload, sync, restore, and manage WordPress videos with Cloudflare Stream.
- Easy Text-to-Speech – Convert written content into high-quality synthesized speech for WordPress.
- Handywriter – AI-powered writing assistant for WordPress.
- PaddlePress PRO – Paddle plugin for WordPress.
Tagged as
quality
Security
Alternatives
Other plugins for securing a site.
Firewall, Malware Scanner, Two Factor Auth, and Comprehensive Security Features, powered by our 24-hour team....
Free
5M+ installs 4.7★ (4,983)
The best anti-spam protection to block spam comments and spam in a contact form. The most trusted antispam sol...
Free
5M+ installs 4.7★ (1,186)
Loginizer
93Loginizer is a WordPress security plugin which helps you fight against bruteforce attacks.
Free
1M+ installs 4.8★ (1,030)
Safe SVG
93Enable SVG uploads and sanitize them to stop XML/SVG vulnerabilities in your WordPress website.
Free
1M+ installs 4.9★ (79)
Protect your website investment with All-In-One Security (AIOS) – a comprehensive and easy to use security plu...
Free
1M+ installs 4.7★ (1,715)