← All tools

CSP Checker

Parse a site's Content-Security-Policy header and flag the common footguns — unsafe-inline, wildcard sources, missing frame-ancestors, no reporting.

Paste a policy — useful for testing a new CSP before deploying: Analyse policy

— or —

Audit live URL