Get a full analysis of your Content-Security-Policy, and understand how to easily improve it:

Client-Side CSP Security Posture

A+
Improve Grade
  • CSP Protection
    Active
  • CSP Reporting
    Missing
  • CSP Validity
    Valid
  • XSS
    Strong CSP Protection
  • Clickjacking
    Strong CSP Protection
  • Formjacking
    Strong CSP Protection
  • General
    Strong CSP Protection

Content Security Policy (CSP) Scanner

Generate CSP

CSP Scanner helps developers and security experts to easily inspect and evaluate a site’s Content Security Policy (CSP), and understand wether it serves as a strong mitigation against client-side attacks like XSS, Clickjacking, Formjacking, Data Exfiltration and more.

The CSPscanner.com tool is built combining years of cumulative best practice with the Content-Security-Policy technology and how to most effectively block client-side attacks.

The tool may suggest a Grade / Score / Tips / Bypasses to a presented CSP.

If you are looking to automate the deployment of Content-Security-Policy (CSP), the recommendations suggested by this tool, along with other important security controls (SameSite, Security headers), you can use RapidSec.com.