Plone security.txt

A Plone addon to generate and provide a security.txt for the Plone website.

Features

One site-wide, structured Security Policy with draft and published lifecycle states
Deterministic RFC 9116 output at /.well-known/security.txt
Anonymous GET/HEAD, strong ETags, Canonical enforcement, and expiry-bounded caching
Dedicated management permission, Classic UI control panel, REST API, and expiry warning
Optional fail-closed OpenPGP clear-signing via the signing extra
Compatible with Plone 6.0+

See the administrator guide, REST API, deployment guide, and signing guide.

Installation

Add plone.securitytxt to your project's dependencies:

# In your pyproject.toml
dependencies = [
    "plone.securitytxt",
    # ...
]

Then activate the addon in your Plone site's control panel or via GenericSetup.

Development

Setup

# Clone the repository
git clone https://github.com/collective/plone.securitytxt.git
cd plone.securitytxt

# Create virtual environment
python -m venv venv
source venv/bin/activate

# Install in development mode
uv sync --extra test

Running Tests

uv run pytest

Running Tests with Coverage

uv run pytest --cov=plone.securitytxt --cov-report=html

License

GPL-2.0-or-later

Author

Maik Derstappen md@derico.de

Release files for plone.securitytxt 1.0.0b3

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for plone.securitytxt 1.0.0b3
File	Size	Uploaded
plone_securitytxt-1.0.0b3.tar.gz	48.6 kB	Sep 20, 2026	Details

Built distribution (wheel)

Table of built distributions (wheels) for plone.securitytxt 1.0.0b3
File	Interpreter	ABI	Platform	Reset
plone_securitytxt-1.0.0b3-py3-none-any.whl 50.9 kB Sep 20, 2026	Python 3	none	any	Details

Total release size: 99.5 kB

Release files / plone_securitytxt-1.0.0b3.tar.gz

Download URL	plone_securitytxt-1.0.0b3.tar.gz
Size	48.6 kB
Tags	Source
SHA-256 checksum How to use checksums	`74458cc2c8abe049d7574b0a618de5e35e52fea6925fdecdf56b96f1016a3cf8`
BLAKE2b-256 checksum How to use checksums	`85eb566e0aca7da569c623d0846674265d37fc0da22de09a617bf5633e9d54d9`
Upload date	Sep 20, 2026
Uploaded using Trusted Publishing? What is trusted publishing?	No
Uploaded via	`twine/7.0.0 CPython/3.13.14`

Release files / plone_securitytxt-1.0.0b3-py3-none-any.whl

Download URL	plone_securitytxt-1.0.0b3-py3-none-any.whl
Size	50.9 kB
Tags	Python 3
SHA-256 checksum How to use checksums	`97eac28b02a141f20d5071bb819210015893c655077b916c45f5ef724301bb35`
BLAKE2b-256 checksum How to use checksums	`8b01b7bf98ce00bcc47184607234369541b0236dc0c4090cffc7df075f29cae2`
Upload date	Sep 20, 2026
Uploaded using Trusted Publishing? What is trusted publishing?	No
Uploaded via	`twine/7.0.0 CPython/3.13.14`