CSPeek analyzes Content-Security-Policy and Content-Security-Policy-Report-Only headers from target URLs and converts findings into explainable risk output.
What it does
- Retrieves and parses CSP headers from HTTP responses
- Identifies weak, missing, or permissive policy patterns
- Produces deterministic findings with a numeric risk score
Why it matters
CSP is easy to misconfigure and hard to review manually at scale. CSPeek provides consistent, defensible analysis that helps teams improve browser-side hardening.