Documentation

Content Security Policy (CSP) monitoring helps you track violations and optimize your security headers.

WordPress Plugin Installation

Install our CSP Manager plugin for easy WordPress integration.

Custom / Manual CSP Setup

For custom implementations, add the report-uri directive to your CSP headers.
Please remember to replace (YOUR_API_KEY) with your actual API key.

NOTE: These are examples only, your Content Security Policy set-up will be different.

Content-Security-Policy-Report-Only (This will not enforce the policy, but will report violations):

Content-Security-Policy-Report-Only: default-src 'self'; report-uri https://metricpoints.com/api/csp-reports/(YOUR_API_KEY)

Content-Security-Policy (This will enforce the policy):

Content-Security-Policy: default-src 'self'; report-uri https://metricpoints.com/api/csp-reports/(YOUR_API_KEY)