CSP Violation Reporting
Monitor and analyze Content-Security-Policy violations in real-time across all your domains.
CSP Policy Generator
Automatically generate a tight Content-Security-Policy based on your website's actual content.
Alerting & Notifications
Get alerted on your favorite channels when a specific security event occurs.
Script Inventory
Monitor all scripts loaded on your website, their integrity hashes, and known CVEs.
Real-Time Monitoring
Catch violations from checkout flows, login pages, and every route your scanner can't reach.
Security Headers Monitoring
Grade your HTTP security headers and HTTPS hygiene A–F against the criteria enterprise security scorecards use.
Subresource Integrity Audit
Find external scripts missing Subresource Integrity — or configured so the browser check silently never runs.
Higher Education
One CSP across every department, school, and subdomain — central oversight without freezing what departments can ship.
B2B SaaS
Pass the security questionnaire with evidence, not assurances. Catch third-party drift before it shows up in a customer's pen test.
Modern Web Apps
A CSP that survives your bundler, your CDN, and your auth wall. Real-browser scans see what static analysis hides.
WordPress
Drop in our MU-plugin and ship a policy generated from your real WordPress site — plugins, themes, blocks, and all.
WooCommerce
PCI DSS 4.0 wants you watching every payment-page script. Consepo monitors checkout pages a crawler can't reach.
Ecommerce
Shopify, Magento, BigCommerce, custom — same workflow, six export formats, real cart and checkout coverage.
Any Stack
One scan. Six deployment formats. Headers, meta tags, MU-plugin, Worker, WP Engine config, or JSON for any CDN.
Free CSP Scan
Run a one-off scan for any public site and get immediate CSP guidance.
CSP Validator
Evaluate a live Content Security Policy and see which gaps need deeper browser-rendered evidence.
CSP Generator
Generate a deployable Content Security Policy from real browser crawl evidence.
Hash Calculator
Pick sha256, sha384, or sha512 and build a Content Security Policy hash for inline script or style.
SRI Calculator
Generate Subresource Integrity values for external scripts and styles.
API Hash Automation
Programmatically generate CSP/SRI hashes through the token-auth API.