Security home RTO Lock spec Audit Policy builder Download Install
RTO Lock Generator

Generate a custom rto-lock.json policy

Create a ready-to-upload lock file in your browser, without hand-writing JSON. Use it to block Remote Tab Opener completely, or allow public pages while protecting sensitive areas.

🔒 Built locally in your browser. Nothing is sent to remote-tab-opener.com.

Start building your policy Validate after upload
1. Choose a policy 2. Review the generated file 3. Download rto-lock.json 4. Upload it to your website

Why use RTO Lock?

A simple way to publish your automation policy

RTO Lock lets a website clearly say what is allowed and what is blocked. Sensitive services should usually deny everything. Public websites can allow safe pages while blocking login, account, payment or administration paths.

🛡️ Block by default

Best for banking, healthcare, identity, insurance and payment workflows.

🌐 Allow public pages

Good for documentation, help pages and public product content.

📦 Download instantly

You get a ready-to-upload JSON file and an optional text summary.

RTO Lock visual

RTO Lock

Visible policy, clear boundaries

The goal is not to hide anything. The goal is to make a website’s policy explicit, readable and easy to deploy.

  • Use /.well-known/rto-lock.json as the preferred location.
  • Use /rto-lock.json as a simple fallback if needed.
  • Run the audit tool after upload to confirm the file is reachable.

Policy builder

Choose what your site allows

Local tool
Recommended for sensitive services: banks, insurance portals, government services, healthcare websites, identity systems and payment flows should normally choose Block everything. Avoid publishing detailed internal path rules if those paths reveal protected site structure.
Quick presets

Core capabilities

Scope and path rules

One path prefix per line. Useful mainly when the default policy is deny.
One path prefix per line. Deny always wins.

Generated output

Download generated files

Review the live JSON below, then download the final files.

0 bytes
After uploading this file to your website, run the audit tool to confirm that it is reachable and valid.
Generator ready.

Live generated rto-lock.json



          

            Show the text summary file
            

          

        


        

          
Upload checklist

          
What to upload

          
    
            
  1. Download rto-lock.json.
    2. 
            
  2. Upload it to /.well-known/rto-lock.json.
    3. 
            
  3. Use /rto-lock.json as fallback if needed.
    4. 
            
  4. Serve it publicly over HTTPS.
    5. 
          

        

      

    

  


  

    

      

        
Next step

        
Validate after upload

        
Once your file is on the server, use the audit tool to confirm that RTO can find and validate it.

        Run RTO Lock audit
      

    

    

      

        
Installation notes

        
Your settings stay local

        
The generator does not send your settings to remote-tab-opener.com. The policy file is built in your browser, downloaded locally, and installed by you on your own website. The preview exists only to help you verify the generated content before upload.