Passive pre-check
← Cyber Security Center
CSP Preview and Builder
Generate a starter CSP draft from visible origins and selected services.
Risk indicator
Overly broad source permissions and uncontrolled script execution.
This tool provides a passive pre-assessment; security testing must not be performed on unauthorized systems.
Result
Baseline technical indicators
Your score, risk level, gaps, and actionable recommendations will appear here.
Check scope
What does this check?
- ✓ External origins
- ✓ Script and style sources
- ✓ Frame and form boundaries
Interpretation
How should results be read?
Results rely only on accessible public HTTP responses and baseline technical indicators. Manual review is recommended.
Common mistakes
What is often missed?
- ○ Deploying without testing
- ○ Keeping unsafe-inline permanently
- ○ Allowing wildcard sources
Frequently Asked Questions
Limits of passive checks
Is this a definitive security report?⌄
No. It is a passive pre-assessment based only on baseline indicators visible in public responses.
Can I check a website owned by someone else?⌄
Tools should only be used for systems you own or are explicitly authorized to review.
Does a low-risk result guarantee security?⌄
No. Access and technical conditions affect results; manual review is recommended for detailed assessment.
CRY expert support
Let’s review this result together.
We can prioritize the findings and build an actionable improvement plan for your website.
SEO note
Connect CSP Preview and Builder output to search visibility.
A tool result is not the final report by itself; it should be read together with technical signals, page intent, and competition level.
01
Read technical SEO signals in one place and prioritize the next action.
02
See more clearly how search engines crawl and interpret the page.
03
Connect the output to content, performance, and security improvements.