CSP Radar

CSP Radar is a software-as-a-service platform focused on Content Security Policy (CSP) management for web applications. The platform enables developers and security engineers to monitor, build, and enforce CSP headers without manual policy management. Core platform capabilities include: - Real-time violation monitoring with a live dashboard showing blocked resources across all CSP directives - A visual policy builder with version control for constructing and editing CSP strings - A console error parser that maps browser errors to specific directive fixes - Automated security analysis to detect weak directives, missing nonces, and overly permissive policies - A snippet lab for generating framework-specific implementation code (Next.js, Apache, Nginx, etc.) - Pre-built base templates for common third-party services such as Google Analytics, Stripe, and YouTube The platform processes over 84 million CSP violation reports daily via a high-availability ingestion API with sub-15ms latency. It supports a report-only deployment mode, allowing teams to observe potential violations before moving to full enforcement. CSP Radar also provides a suite of free, no-account-required tools including a CSP analyser, CSP scanner, CSP generator, nonce and hash generator, and a security headers grader. The platform is designed for web development and security engineering teams, with compatibility across frameworks including Next.js, React, Vue.js, Laravel, Svelte, and Astro. Data handling includes TLS 1.3 encryption in transit, AES-256 encryption at rest, and GDPR-compliant report ingestion that strips sensitive query parameters.