// Security
An HTTP header that tells browsers which sources are allowed to load scripts, styles, and other resources on your page. A properly configured CSP prevents cross-site scripting (XSS) attacks.
Why it matters: Content Security Policy (CSP) is one of the security signals that shapes how search engines, AI tools, and real visitors experience your website. Getting it right removes friction, protects your rankings, and makes every other optimization work harder. Auditing it regularly is the fastest way to catch regressions before they cost you traffic or conversions.
See how your own site handles content security policy (csp) — no signup required.
Check your site's Content Security Policy (CSP) — run the free Security Agent