Validate Content Security Policy headers against W3C spec and common pitfalls. Code never leaves your device — formatting and validation run locally in your browser.
Content reviewed October 2026 · About Toolzum
Build a Content Security Policy header by selecting directives and allowed sources. Code never leaves your device — formatting and validation run locally in your browser.
Validate git commit messages against the Conventional Commits specification. Code never leaves your device — formatting and validation run locally in your browser.
Analyze HTTP request and response headers — detect security headers, review formatting, and inspect value structure. Code never leaves your device — formatting and validation run locally in your browser.
Validate IBAN structure, length, and mod-97 check digits for 80+ countries. Catch transfer typos before money moves — local ibantools work, free, no signup.
Score your resume against a job description for ATS compatibility — keyword gaps, formatting flags, and fix suggestions. Applicants lift a 52/100 resume past 80 before applying — 1 credit per check, sign in free.
default-src, script-src, style-src, frame-ancestors, and the full set.
Flagged wherever it appears — nonces and hashes suggested instead.
Evaluated as enforceable policy with violation paths explained.
No — validation runs locally in your browser, free with no signup.
Content Security Policy Generator
Build a Content Security Policy header by selecting directives and allowed sources. Code never leaves your device — formatting and validation run locally in your browser.
HTTP Security Checker
Run an HTTP security probe on a live URL — reachability, redirect chain, and visible response details, plus a reference checklist for HSTS, X-Frame-Options, and CSP.