Website Security
Processed on your deviceEvidence-Driven CSP Policy Engineer
Derive a restrictive CSP draft from observed HTML or HAR origins while surfacing inline code and dynamic execution blockers.
HTML source or HAR capture
The generated policy is a review draft based only on observed input. It deliberately avoids unsafe-inline and unsafe-eval and should be rolled out in report-only mode first.
Evidence-bound result
Engineer CSP draft