Discover
Observe Browser Resources
Load selected public pages in Chrome and inspect the scripts, styles, images, fonts, frames, connections, and inline-code evidence observed during the scan.
CSP Generator
Content Security Policy Generator & CSP Scanner
Enter a public URL to see what your site loads and build an editable Content Security Policy header. Review the browser-based scanner's findings, copy your candidate, and test it in report-only mode. Premium monitoring helps you track changes after that first scan.
Run the free CSP scanner and Content Security Policy generator or learn how Content Security Policy works.
scan: chrome
crawl: 3 free / 10 premium
output: CSP header
Generate
Build and Review a CSP Candidate
Turn browser evidence into an editable policy, review broad or risky values, and optionally add SHA-256 sources for inline content observed on scanned pages.
Test
Move Through Report-Only First
Copy deployment-formatted headers, test representative application flows without blocking them, and review violation evidence before enforcement.
Monitor
Review CSP Drift Over Time
Verified-site monitors compare recurring scan evidence with an accepted baseline so new and removed sources remain visible during rollout and maintenance.
Learn and Deploy
Content Security Policy Resources
Use the reference guides for CSP fundamentals, adaptable examples, report-only testing, and platform-specific header syntax.
The Chrome extension and Firefox Add-on can start a free scan from the active tab. WordPress administrators can use the free Script Sentinel WordPress CSP plugin to scan up to 10 public pages, review the generated Content Security Policy, and explicitly activate, verify, deactivate, or restore it from Tools > Script Sentinel.