Skip to content
WasyTech
AvailableOpen SourceMIT

CSP Header Analyzer

Audit Content-Security-Policy headers without server round-trips.

Content Security Policies are notoriously difficult to write and debug. This utility parses your raw CSP strings, formats them for readability, and audits them for common security misconfigurations (like `unsafe-inline` or missing fallbacks). Because it runs entirely in your browser using pure TypeScript, your internal domain structures and security policies are never exposed to external servers.

  • Web
Open SourceLocal processingNo account

Downloads for this utility are being prepared.

Core features

Included in the free core utility.

  • Parse and format complex CSP strings
  • Audit for unsafe directives (e.g., unsafe-eval)
  • Validate against CSP Level 3 specifications
  • Zero-latency client-side execution

Privacy & data handling

This utility processes data locally on your device wherever technically possible.

Processing
Local, on your device
Account
Not required
Internet
Works offline
Telemetry
No telemetry

Details

Category
Developer Tools
Platforms
Web
License
MIT

Frequently asked questions

What does CSP Analyzer do?

Content Security Policies are notoriously difficult to write and debug. This utility parses your raw CSP strings, formats them for readability, and audits them for common security misconfigurations (like `unsafe-inline` or missing fallbacks). Because it runs entirely in your browser using pure TypeScript, your internal domain structures and security policies are never exposed to external servers.

Is CSP Analyzer free?

Yes. CSP Analyzer is free to use.

Is CSP Analyzer open source?

Yes. CSP Analyzer is open source under the MIT license.

Does CSP Analyzer require an account?

No. CSP Analyzer does not require an account.

Does CSP Analyzer send my data anywhere?

CSP Analyzer has no telemetry. Processing happens locally on your device.

Related utilities