New: export PCI DSS v4 evidence from real browser traffic.
Platform
Platform
Monitoring
Collect 12 browser report types
Alerting
Custom-rule alerts, 6 channels
CSP builder
Build a CSP from real reports
PCI DSS evidence
6.4.3 and 11.6.1, auditor-ready
Supply-chain
Script SBOM and CVE detection
API and MCP
Automate it, or drive it with AI
Featured
PCI DSS v4 evidence from real browser traffic
See how it works
Solutions
Solutions
Developers
One header, full API and MCP
Agencies
Monitor a portfolio of client sites
Enterprise and EU
Sovereignty, SSO, and procurement
Get started
Not sure which fits? Talk to our team
Talk to sales
Tools
Free tools
CSP scanner
Scan a live policy
CSP evaluator
Paste and grade a policy
Security headers scanner
Audit response headers
Reporting-API checker
Verify your reporting setup
SRI hash calculator
Subresource integrity hashes
CSP hash calculator
Hashes for inline scripts
Compare your site
Benchmark against the web
Chrome extension
Inspect CSP as you browse
Featured
Inspect and build your CSP as you browse
Get the extension
Resources
Resources
Platform doc
How to use the CentralCSP platform
Web security doc
Guides on CSP and web security
API & MCP doc
Automate it, or drive it with AI
Blog
Notes from the team
State of the Web
Our annual security report
Free tool
Check your Reporting-API setup in seconds
Open the scanner
Pricing
Contact
en
fr
Log in
Start free trial
CSP Scanner
Fetch a URL and inspect its Content-Security-Policy.
Follow redirects
Scan CSP