PrismKitWebCSP GeneratorCSP GeneratorRuns in your browserLocalCopy linkMarkdownBuild a Content-Security-Policy directive by directive, or paste one to see what it allows and where it is weak.WebSocket TesterConnect to a ws:// or wss:// endpoint, send text, JSON or binary messages and watch a timestamped log.Security Headers GeneratorGenerate HSTS, Referrer-Policy, Permissions-Policy and cross-origin headers as nginx, Apache, Caddy, Netlify, Vercel or Express config.