nowfound

Dev tools · August 20, 2014

CS

Content Security Policy Report Aggregator

https://github.com/c0nrad/caspr

Content Security Policy Report Aggregator launched on August 20, 2014 with 12 votes and more than 75% of that year's launches.

In plain words

Content Security Policy Report Aggregator collects and analyzes Content Security Policy violation reports from web applications. It is designed for developers and security teams who need to monitor and understand CSP violations across their sites. The tool aggregates reports in one place, making it easier to track security policy issues and identify patterns in how browsers enforce content restrictions.

written from the facts on this page · September 2026

Does a similar job

all alternatives →
  • CentralCSP2024 · centralcsp.com · ▲11

    Avoid client-side attacks with content-security-policy

  • Csper2020 · csper.io · ▲5

    Content Security Policy made easy

  • Content-Security-Policy Builder [PHP]2015 · github.com · ▲5

    Build Content-Security-Policy headers from a JSON file (or build them programmatically) - paragonie/csp-builder

  • SecuriScanNov 2025 · chromewebstore.google.com · ▲9

    Scan any website for security flaws in one click

  • I built a PR listener and ruleset to detect malicious code in CI/CD2025 · github.com · ▲13

    I built a GitHub app that detects it in pull requests, notifies or blocks them. Alongside it, I published a Semgrep ruleset for any stage of the CI/CD. I started this after getting frustrated by all the FUD around malicious code - lots of noise, little effort to solve it. Having said that, it's still a major attack vector - a stored RCE, with the codebase itself as the sink. Feedback is appreciated. The app, PRevent - https://github.com/apiiro/PRevent The ruleset: https://github.com/apiiro/malicious-code-ruleset The research:…

  • BrowserTotal: A framework for analyzing browser security posture2025 · browsertotal.com · ▲28

    Live extension analysis: Point us at a Chrome/Edge/Firefox extension (store URL or CRX). We spin up a safe sandbox and observe it in real time—permissions use, message passing, storage writes, network calls, remote code loading, and UI injections. Package scanning: Paste an npm/package URL or code. We do quick static + dynamic checks: install/postinstall scripts, obfuscation/eval, exfil endpoints, suspicious APIs, and typosquat/reputation signals. AI explainer: An LLM summarizes the behaviors and risk patterns in plain English (why it’s risky, what to verify,…

More dev tools this month

the category →
  • /dev/null▲489

    a social network for devs

    Dev tools · 3d ago · dev-null.sh

  • open-source IDE for thoughtful software design. Contribute to devdotfast/whiteboard development by creating an account on GitHub.

    Dev tools · 28d ago · github.com

  • Contribute to reladraw/reladraw development by creating an account on GitHub.

    Dev tools · 26d ago · github.com

  • OpenBot▲362

    Grok Bot alternative: free, local, open-source, multiplayer

    Dev tools · 23d ago · openbot.run

  • Talanoa▲346

    Hi HN, I’m a fullstack developer, and honestly, I’ve lost count of how many side projects I’ve worked on over the years. But one idea kept coming back to me: a different kind of email client. It first came to me in 2014: “What if we could handle emails more like conversations?” Every year, I’d revisit this concept in my “Build Notes.” Ten years later, no one had built exactly what I had in mind — so I finally decided to do it myself. That’s how Talanoa was born. I wanted something focused on people, not timelines. I was tired of marking messages as unread just to remember to reply later, or…

    Dev tools · 21d ago · talanoa.email

  • CoreSpeed▲332

    One MCP for everything your agents need: apps, memory, tools

    Dev tools · 29d ago · corespeed.io

Source: Show HN post ↗

Launched alongside, August 2014

the whole month →