Features
Solutions
Tools
Try Free
Learn
Pricing
Sign in
Sign up
Dashboard
CSP Violation Reporting
Monitor and analyze Content-Security-Policy violations in real-time across all your domains.
CSP Policy Generator
Automatically generate a tight Content-Security-Policy based on your website's actual content.
Alerting & Notifications
Get alerted on your favorite channels when a specific security event occurs.
Script Inventory
Monitor all scripts loaded on your website, their integrity hashes, and known CVEs.
Real-Time Monitoring
Catch violations from checkout flows, login pages, and every route your scanner can't reach.
Higher Education
One CSP across every department, school, and subdomain — central oversight without freezing what departments can ship.
B2B SaaS
Pass the security questionnaire with evidence, not assurances. Catch third-party drift before it shows up in a customer's pen test.
Modern Web Apps
A CSP that survives your bundler, your CDN, and your auth wall. Real-browser scans see what static analysis hides.
WordPress
Drop in our MU-plugin and ship a policy generated from your real WordPress site — plugins, themes, blocks, and all.
WooCommerce
PCI DSS 4.0 wants you watching every payment-page script. Consepo monitors checkout pages a crawler can't reach.
Ecommerce
Shopify, Magento, BigCommerce, custom — same workflow, six export formats, real cart and checkout coverage.
Any Stack
One scan. Six deployment formats. Headers, meta tags, MU-plugin, Worker, WP Engine config, or JSON for any CDN.
Free CSP Scan
Run a one-off scan for any public site and get immediate CSP guidance.
CSP Validator
Evaluate a live Content Security Policy and see which gaps need deeper browser-rendered evidence.
CSP Generator
Generate a deployable Content Security Policy from real browser crawl evidence.
Hash Calculator
Pick sha256, sha384, or sha512 and build a Content Security Policy hash for inline script or style.
SRI Calculator
Generate Subresource Integrity values for external scripts and styles.
API Hash Automation
Programmatically generate CSP/SRI hashes through the token-auth API.