Alternatives to CSP Evaluator
A Google web tool that checks whether a Content Security Policy mitigates cross-site scripting. The listings below can replace it for an important use case. Each note says what changes if you switch.
The original
CSP Evaluator
A Google web tool that checks whether a Content Security Policy mitigates cross-site scripting.
Replacements
Listings that take over the same core job as CSP Evaluator.
Csper CSP Evaluator
An online evaluator that analyses the directives in a Content-Security-Policy header.
Csper CSP Evaluator analyses Content-Security-Policy directives within a wider toolset for building and monitoring policies, with less public detail on how checks work and no Chrome extension.
Similar software
Related functionality, not a direct replacement.
HTTP Observatory
Mozilla's web tool that grades a site's HTTP security headers and gives fix recommendations.
Security Headers
A web service that analyses a site's HTTP response headers and grades them from A+ to F.
Webbkoll
A web-based privacy checker for cookies, third-party requests, HTTPS and security headers.
HSTS Preload List Submission
A web tool to check a domain's HSTS preload status and submit it for inclusion.
Report URI
A hosted service that collects and analyses CSP and other browser security reports from your website.
Web Check
Open-source, self-hostable tool that analyses a website's DNS, security, headers and other public details.
