Setup & Installation
Add CSP reporting to your site and connect it to MetricPoints.
CSP Monitoring Setup
Content Security Policy (CSP) monitoring helps you track violations and optimize your security headers.
Recommended for most sites: Managed Safety Net
Install one hosted MetricPoints script on any website, keep the token in place, and manage policy behavior from your MetricPoints account.
<script async src="https://csp-heal.metricpoints.com/managed-csp.js?heal-token=YOUR_HEAL_TOKEN"></script>No download is required. The bootstrap script is hosted by MetricPoints.
Open Managed Safety Net GuideWordPress Plugin Installation
Install our CSP Manager plugin for easy WordPress integration.
Setup Steps:
- Download the MetricPoints CSP Manager plugin
- Upload and activate in WordPress admin
- Configure your API key
- Set up CSP reporting endpoint
- Configure CSP headers
Custom / Manual CSP Setup
For custom implementations, add the report-uri directive to your CSP headers.
Please remember to replace (YOUR_API_KEY) with your actual API key.
NOTE: These are examples only, your Content Security Policy set-up will be different.
Content-Security-Policy-Report-Only (This will not enforce the policy, but will report violations):
Content-Security-Policy-Report-Only: default-src 'self'; report-uri https://metricpoints.com/api/csp-reports/(YOUR_API_KEY)Content-Security-Policy (This will enforce the policy):
Content-Security-Policy: default-src 'self'; report-uri https://metricpoints.com/api/csp-reports/(YOUR_API_KEY)