CSP Analyzer

Analyze and validate Content Security Policy headers for security issues, misconfigurations, and missing directives

All processing happens in your browser. No data is uploaded.

Offline Ready

CSP Analyzer

Analyze and validate Content Security Policy headers for security issues, misconfigurations, and missing directives

🔒All processing happens in your browser. No data is uploaded.

CSP Header Input

Paste your Content-Security-Policy header value here...
Example: default-src 'self'; script-src 'self' https://cdn.example.com; style-src 'self' 'unsafe-inline'