Generate CSP Header

Build a Content Security Policy header for a website.

Upgrade Insecure Requests

Instructs browsers to treat all of a site's insecure URLs (those over HTTP) as though they have been replaced with secure URLs (those over HTTPS).

Block All Mixed Content

Prevents loading any assets using HTTP when the page is loaded over HTTPS.

Add this to your Content-Security-Policy HTTP response header or a <meta> tag.

Build Content Security Policy headers to control which scripts, styles, images, and frames a site may load.

For another check related to CSP header, open SSL certificate checker and password entropy calculator.

Related Tools

Check Safe Browsing

Check if a website is safe to visit and free from malware.

Generate strong random passwords with practical length and character options.

Review the browser fingerprint details sites can read.

Build advanced Google search queries for security research.

Generate random UUID v4 identifiers for testing, databases, and application records.

Create a security.txt file so researchers know how to report vulnerabilities.

Check security headers and see which protections a site exposes.

Create bcrypt password hashes with the cost setting you need.

Feel free to request missing tools or give some feedback using our contact form.