Script Sentinel - CSP Generator

Generate a Content Security Policy (CSP) candidate for the website you’re viewing—without manually inventorying every resource. Script Sentinel scans the active tab’s public URL only when requested. It observes scripts, styles, fonts, images, frames, and network destinations across 1 to 3 reached pages, then returns a copyable CSP candidate with a security score, coverage details, and review warnings. KEY FEATURES Scan between 1 and 3 pages Merge related subdomains to simplify policies Detect mixed content and review external domains Include SHA-256 hashes when supported by observed evidence Copy the CSP alone or with optional security hardening headers Review page counts, scores, warnings, and partial-scan notices Keep up to five recent results locally Use light or dark mode with clear scan-progress feedback Open a public website, select the extension, choose your options, and click Generate CSP. Keep the popup open while the scan completes. No account is required. NEED DEEPER SCANNING? Continue in the full Script Sentinel scanner to edit and refine your policy: https://script-sentinel.com/generate-csp Script Sentinel Premium adds authenticated scans of up to 10 pages, recurring CSP drift monitoring, verified site ownership, dashboard history, alerts, exports, and deployment guidance: https://script-sentinel.com/pricing LEARN MORE ABOUT CSP CSP fundamentals and directive guidance: https://script-sentinel.com/what-is-content-security-policy Practical Content Security Policy examples: https://script-sentinel.com/csp-examples Test safely with Content-Security-Policy-Report-Only: https://script-sentinel.com/csp-report-only Platform and web-server header examples: https://script-sentinel.com/csp-header-examples Scan results are candidates based on the pages and states reached. Review and test a candidate in report-only mode before enforcing it in production.