Generators
Building a new site or adding a header for the first time? Generators build the config from scratch. If you have a live site to scan, use the fixer tools instead.
🛡
CSP Generator
Build a Content Security Policy by selecting your sources. Outputs header value + Nginx/Vercel config.
⚡
CORS Header Generator
Select origin, methods, and headers. Get Nginx, Express, and FastAPI config in one click.
🔒
Security Headers Generator
Configure all 9 security headers at once. HSTS, X-Frame-Options, Referrer-Policy, Permissions-Policy, and more.
🎛
Permissions-Policy Generator
Control camera, microphone, geolocation, payment, and more. Block features you do not use.
Generators vs Fixers — which to use
| Situation | Use |
|---|---|
| I have a live site and want to see what's missing | HeadersFixer — scans your URL |
| I'm building from scratch and need a starting config | Generators — this page |
| I have a CORS error in the browser console | CORSFixer — live preflight test |
| I need a CSP for a page I haven't deployed yet | CSP Generator |
| My CSP is blocking something on a live page | CSPFixer — scans your URL |