CSP Evaluator

Evaluate a Content-Security-Policy string for obvious gaps and risky directives.


Suggested Tools


About


CSP Evaluator reviews a pasted CSP and calls out weak patterns (like overly broad script-src).

Paste a policy, run, and tighten the issues before shipping.

Please enable JavaScript.