CSP Warden collects and analyses Content Security Policy violation reports from your websites in real time. No security expertise needed-just connect, monitor, and understand what's happening.
Last 30 days - example.com
From registration to real-time monitoring in four simple steps.
Add your domain to CSP Warden and receive a unique report endpoint token for violation reporting.
Add the report-uri directive to your CSP header. We provide setup guides for all popular web servers.
Violations are categorised by directive, source, and browser so you can see exactly what's being flagged.
Use the visual policy editor to adjust directives and move from report-only to enforcement when ready.
No worries - here's the 30-second version.
Content Security Policy is a browser security standard. It tells the browser which scripts, styles, and resources are allowed to load on your page - blocking anything that shouldn't be there.
Without CSP, attackers can inject malicious scripts (cross-site scripting) that steal user data, hijack sessions, or deface your site. CSP is your first line of defense.
When your CSP blocks something, the browser sends a violation report. CSP Warden collects these reports, shows you what's happening, and helps you refine your policy.
Real tools to understand and improve your web security posture.
Violations stream into your dashboard as they happen. Filter by directive, source, browser, and time range to find exactly what you need.
Interactive charts show violation trends, blocked host distribution, and browser breakdowns. Track your security posture over days, weeks, or months.
Edit your Content Security Policy with a visual interface or raw mode. Built-in validation warns you about common mistakes like HTTP sources or redundant directives.
Scan any URL to grade its security headers. Checks 15+ headers including CSP, HSTS, X-Frame-Options, and more - with actionable recommendations.
Add and manage multiple domains from one dashboard. Each domain gets its own unique report endpoint, policy editor, and violation tracking.
Role-based access control with administrator, and third-party roles. Domain delegation and complete audit trails for every action.
CSP Warden includes a suite of security tools to help you understand and improve your web security beyond just CSP.
Grade any site's security headers from A+ to F with detailed recommendations.
Generate SHA-256, SHA-384, or SHA-512 hashes for inline scripts and styles to use in your CSP.
Check your site's IPv6, DNSSEC, HTTPS and other modern tech readiness.
Generate fake violations to test your reporting pipeline is working correctly.
Everything you can do in the dashboard is available through our REST API. Automate your security workflow and integrate CSP management into your processes.
Available on Professional and Enterprise plans.
# List your domains
curl -H "Authorization: Bearer $TOKEN" \
https://cspwarden.com/api/domains/
# Get recent violations
curl -H "Authorization: Bearer $TOKEN" \
https://cspwarden.com/api/violations/?domain=example.com
# Update CSP policy
curl -X PUT -H "Authorization: Bearer $TOKEN" \
-d '{"policy": "default-src 'self'; script-src 'self'"}' \
https://cspwarden.com/api/domains/1/policy/
Configure email summaries (daily or weekly) to get an overview of violations. Set up webhooks to receive real-time HTTP notifications whenever new violations are detected - pipe them into your monitoring tools, Slack, or anywhere else.
{
"event": "violation.new",
"domain": "example.com",
"violation": {
"directive": "script-src",
"blocked_uri": "https://evil.com/inject.js",
"document_uri": "https://example.com/checkout",
"timestamp": "2026-03-31T14:22:00Z"
}
}