# Overview (/en/docs/platform)





CentralCSP collects the reports browsers send about your pages, inventories the scripts running on them, and turns both into client-side security signal and PCI DSS v4 evidence.

The dashboard opens on report counters and a volume chart:

<img alt="The CentralCSP dashboard with report counters and a browser reports over time chart" src="__img0" width="1359" height="691" />

## Start here [#start-here]

New to CentralCSP? [Get started](/en/docs/platform/get-started) covers what it is, then takes you from an empty workspace to reports arriving.

Already collecting? Go straight to [Reports](/en/docs/platform/monitoring).

## The sections [#the-sections]

The platform docs are organised into these sections:

| Section                                        | Covers                                                            |
| ---------------------------------------------- | ----------------------------------------------------------------- |
| [Get started](/en/docs/platform/get-started)   | What CentralCSP does and the quickstart                           |
| [Websites](/en/docs/platform/websites)         | Adding a site, its endpoint, ingestion filters, usage, and access |
| [Reports](/en/docs/platform/monitoring)        | All 13 report types plus the raw Explorer                         |
| [Features](/en/docs/platform/features)         | PCI DSS, the script inventory, and alerting                       |
| [Team](/en/docs/platform/team)                 | Members, groups, and both role systems                            |
| [Security](/en/docs/platform/security)         | Workspace controls, audit logs, and retention                     |
| [Integrations](/en/docs/platform/integrations) | API keys and AI tools                                             |
| [Billing](/en/docs/platform/billing)           | Plans, subscription, and quota                                    |
| [Account](/en/docs/platform/account)           | Your profile and sign-in security                                 |

For the browser standards themselves rather than the product, see [Web Security](/en/docs/web-security). To drive any of this from your own code or from an AI client, see the [API and MCP reference](/en/docs/api-mcp).

## Free tools, no account needed [#free-tools-no-account-needed]

These tools answer one question about a live site, with no account needed:

| Tool                                                | Answers                                                                 |
| --------------------------------------------------- | ----------------------------------------------------------------------- |
| [Security headers scanner](/tools/security-headers) | Which security headers and cookie flags a URL returns, graded           |
| [CSP scanner](/tools/csp-scanner)                   | What a live page's Content-Security-Policy allows, and where it is weak |
| [CSP evaluator](/tools/csp-evaluator)               | The same review for a policy you have written but not deployed          |
| [Reporting API checker](/tools/reporting-api)       | Whether `Reporting-Endpoints` and `report-to` are wired up              |
| [CSP hash generator](/tools/csp-hash)               | The hash that allowlists one inline script or style                     |
| [SRI hash generator](/tools/sri-hash)               | The `integrity` value for a script or stylesheet URL                    |
| [Security comparison](/tools/compare)               | How a site's posture compares to others in its industry                 |

## Next steps [#next-steps]

* [Quickstart](/en/docs/platform/get-started/quickstart)
* [Websites](/en/docs/platform/websites)