CSP Policy Analyzer Online Free
Paste two CSP policies and see the differences. No uploads.
Policy 1
Policy 2
How to Analyze CSP Headers
Paste your CSP header values into the two boxes above. Click Analyze. The tool parses each policy into directives and shows added, removed, changed and unchanged directives between them.
Understanding CSP Directives
Content Security Policy directives control which resources can load. Common directives include default-src, script-src, style-src, img-src, connect-src, and frame-ancestors. Missing directives fall back to default-src.
Free SEO Audit Tool checks page speed. SEO Audit Services provides full technical audits.
Frequently Asked Questions
How does CSP analysis work?
Each policy is parsed into directives. The diff shows added, removed, changed and unchanged directives. An effective-policy resolver shows the combined result when both policies apply.
What is the strict-CSP score?
A simple score (0-10) based on missing recommended directives and presence of known-safe defaults. One-line fix suggestions are generated for common gaps.
Can I paste a real CSP header?
Yes. Paste the Content-Security-Policy header value; the analyzer will parse it and compare against a second policy if provided.
Do you upload my CSP headers?
No. All analysis happens in your browser. Your CSP headers never leave your device.
Can I compare two different CSP policies?
Yes. Paste one policy in each box and click Analyze. The tool shows added, removed, changed and unchanged directives between the two.
Is there a file size limit?
No. The tool runs entirely in your browser with no uploads.