Kitora

CSP Generator

Security-headers style CSP checker. Enter a URL to follow redirects and read the exact Content-Security-Policy or Report-Only header, or paste a policy to validate without rewriting. Includes score breakdown, risk levels, recommendations, directive table, browser notes, and TXT/JSON/CSV/PDF export.

Detected: CSP Policy

URLs fetch the live CSP header only (never invented). Paste a policy to validate it without rewriting directives.

About this tool

Professional CSP audit: fetch the live header, score risks, parse directives, and export findings — never invents a policy.

FAQ

Related tools