CSP analyzer
Paste your Content-Security-Policy header value. We grade every directive against modern best practice. No DNS lookup — bring your own header.
Paste a CSP header
Examples:
Building a new policy? The security headers builder walks you through CSP, HSTS, frame-protection, and the rest of the modern stack.