Dev tools · alternatives · 2026
24 alternatives to Content Security Policy Report Aggregator
https://github.com/c0nrad/caspr
Content Security Policy Report Aggregator collects and analyzes Content Security Policy violation reports from web applications. It is designed for developers and security teams who need to monitor and understand CSP… Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes. Content Security Policy Report Aggregator launched in 2014; newer entries below may have overtaken it.
- 1
CentralCSP▲11Avoid client-side attacks with content-security-policy
2024 · centralcsp.com · its alternatives →
- 2
Yes, it's open source: https://github.com/lissy93/web-check :) Why I'm building this? There are a lot of tools out there for discovering meta and security data relating to a website, IP or server. But currently, there isn't anything that does everything, all in one place and without a paywall/ user sign up. It's still a WIP, and I'm working on a new version, with some more comprehensive checks, so any feedback would be much appreciated :)
2024 · v1.web-check.xyz · its alternatives →
- 3
- 4
- 5
Check your website's SEO, analyze competitors and keywords
2019 · serpstat.com · its alternatives →
- 6
- 7EY
2019 · secalerts.co · its alternatives →
- 8
IAM Least Privilege Policy Generator. Contribute to salesforce/policy_sentry development by creating an account on GitHub.
2019 · github.com · its alternatives →
- 9
Decentraleyes▲108Anti-tracking through "free" centralized content delivery
2017 · decentraleyes.org · its alternatives →
- 10
- 11
SafeDep Vet▲72GitLab CI Component that lets you seamlessly protect your pipelines from vulnerable and malicious open source dependencies. The component integrates directly into your CI/CD workflow through the GitLab CI Catalog and allows you to establish policy-driven guardrails using Common Expression Language (CEL). Key features: - Set your own opinionated security policies as code using CEL - Detect and block risky OSS components before they enter your codebase - Seamless integration as a native GitLab CI Component - Available directly in the GitLab CI Catalog Try and lets us know our thoughts!
2023 · safedep.io · its alternatives →
- 12
Build Content-Security-Policy headers from a JSON file (or build them programmatically) - paragonie/csp-builder
2015 · github.com · its alternatives →
- 13
Scan any website for security flaws in one click
Nov 2025 · chromewebstore.google.com · its alternatives →
- 14
2021 · github.com · its alternatives →
- 15
I built a GitHub app that detects it in pull requests, notifies or blocks them. Alongside it, I published a Semgrep ruleset for any stage of the CI/CD. I started this after getting frustrated by all the FUD around malicious code - lots of noise, little effort to solve it. Having said that, it's still a major attack vector - a stored RCE, with the codebase itself as the sink. Feedback is appreciated. The app, PRevent - https://github.com/apiiro/PRevent The ruleset: https://github.com/apiiro/malicious-code-ruleset The research:…
2025 · github.com · its alternatives →
- 16
hey guys, wanted to show one of my side projects i just made public. the idea is basically another osint tool for pentesters and bug bounty hunters. it watches certificate transparency logs and checks newly-seen domains for exposed stuff like .env files, open .git dirs, config files, db dumps and so on, and puts whatever it finds into a searchable db. you just search a domain (or part of one) and see what's exposed. it's read-only and free. one thing i've been thinking about adding is a way to register for certain keywords and get notified when something new shows up for that search. would…
Jul 2026 · search.cerast-intelligence.com · its alternatives →
- 17
Live extension analysis: Point us at a Chrome/Edge/Firefox extension (store URL or CRX). We spin up a safe sandbox and observe it in real time—permissions use, message passing, storage writes, network calls, remote code loading, and UI injections. Package scanning: Paste an npm/package URL or code. We do quick static + dynamic checks: install/postinstall scripts, obfuscation/eval, exfil endpoints, suspicious APIs, and typosquat/reputation signals. AI explainer: An LLM summarizes the behaviors and risk patterns in plain English (why it’s risky, what to verify,…
2025 · browsertotal.com · its alternatives →
- 18
2019 · pipedream.com · its alternatives →
- 19
Wireshark-like forensic analysis for Model Context Protocol communications Capture, inspect, and investigate all HTTP requests and responses between your IDE and MCP servers - mcp-shark/mcp-shark
Nov 2025 · github.com · its alternatives →
- 20
Hi HN! We kept seeing devs get pwned through MCP tools in ways that security scanners completely miss. So we built an open-source analyzer to catch these attacks. Our first OSS by Mighty team. The problem: At Defcon, we saw MCP exploits with 100% success rate against Claude and Llama. Three attack patterns: Hidden Unicode in "error messages" - Paste a colleague's error into Claude, your SSH keys get exfiltrated Trusted tool updates - That database tool you've used for months? Last week's update added credential theft Tool redefinition - Malicious tool redefines "deploy to prod" to run…
2025 · github.com · its alternatives →
- 21
Online automated vulnerability scanner to secure firewalls, servers, web applications, and apis. Try 14 days for free.
2020 · hostedscan.com · its alternatives →
- 22
- 23
Hi HN! We’re Ethan and Danny, the authors of Tangent (https://github.com/telophasehq/tangent), a Rust-based log pipeline where all normalization, enrichment, and detection logic runs as WASM plugins. We kept seeing the same problems in the OCSF (https://ocsf.io) community: 1) Schemas change constantly. Large companies have whole teams dedicated to keeping vendor→OCSF mappings up to date. 2) There’s no shared library of mappings, so everyone recreates the same work. 3) Writing mappers is tedious, repetitive work. 4) Most pipelines use proprietary DSLs that are…
Nov 2025 · github.com · its alternatives →
- 24
Hi HN! I’m Emile, co-founder of Caido [0]. Today, we are launching the public beta of Caido, a lightweight web security auditing toolkit. While our tool is mostly geared toward pentesters and bug bounty hunters, we thought some of you might find it useful. The web security auditing toolkit space hasn't seen much innovation in recent years, with current tools feeling outdated and lacking in performance and user experience. As the number of security professionals continues to increase, there is a growing need for a user-friendly alternative. This is what motivated us to create Caido. At its…
2023 · caido.io · its alternatives →
Also compare
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →