Security Header Builders: CSP, CORS and Cookies
Security headers tell browsers how to treat your site. These builders help you write them correctly, and the checkers explain what an existing policy allows and where it is weak.
Test new headers on a staging site first, because a strict policy can stop parts of a page working.
Security Headers CheckerGrade a site's HTTP security headers from A to F.CSP Header BuilderBuild a Content-Security-Policy header by choosing where each kind of content may come from.CSP EvaluatorPaste a Content-Security-Policy and see which parts are weak, with a grade and plain explanations.SRI Hash GeneratorGet the integrity value for a script or style sheet and the tag that uses it.Permissions-Policy BuilderDecide which browser features your pages and embedded frames may use, and get the header.CORS Header Builder and ExplainerBuild the CORS headers for your API and check whether a request will need a preflight first.security.txt GeneratorWrite a security.txt file so researchers know how to report a problem on your site.Set-Cookie Header Builder and CheckerBuild a Set-Cookie header with the right flags, or paste one to check it for mistakes.Security Headers GeneratorChoose HSTS and other protective headers and get the exact lines to add, with warnings about risky settings.
No tool matches that. Try a shorter word.