Magento Security Headers and CSP
Install the RapidSec Magento extension, generate a strong Content-Security-Policy in minutes to protect your site.
Protect your Magento Store & Admin
Once you install the Magento extension, RapidSec will automatically setup a CSP with your uniquely generated Report-Uri endpoint. Our smart engine processes the CSP reports coming from your site and within a few clicks, generate a customized CSP built for your site.
Full Video Walkthrough of RapidSec CSP Generator
Our CEO, Shai Alon takes you from A->Z Building an Enterprise-grade CSP using RapidSec – leveraging the techniques used by top companies.
Setup RapidSec for Magento in just 5 steps:
Step 1: Install the Magento Extension
Deploying a strong Content-Security-Policy for your Magento store and Magento-admin is easy with the RapidSec Security Headers extension that handles everything for you. Just install the RapidSec extension from the Magento marketplace. Add your RapidSec (production) token that you will get after signing up and paste it into the extension settings page in your Magento admin page.
Step 2: Use the Security Manager to generate your CSP based on the incoming traffic reports
Automatically create a strong CSP suited for your application. See your new CSP violations quickly from the dashboard and easily allow or dismiss them by CSP directive. Don't worry if you're new to building CSPs, we have you covered with explanations of each directive and industry best practices!
Step 3: See In-depth Analytics
Explore your CSP reports. Dig into your data. Slice and dice by multiple parameters. Understand which assets, pages or browsers are generating CSP violations on your site and access a detailed report view.
Step 4: Get Reports
Deployed your Report-Only CSP and now your users covered some additional flows with some additional browsers? You'll get an email with a summary of your new pending review CSP violations.
Step 5: Setup the Magento admin protection
Since the Magento-admin can have a much stricter policy than the user-facing website, start a new RapidSec project for the Magento-admin. Apply the RapidSec token in the admin section to add admin protective layers with a similar process.
RapidSec makes your CSP and Security Headers deployment easy and compliant
PRODUCTS
”RapidSec made our CSP adoption easy and effective and has saved us months of precious R&D time.”
”Using RapidSec for our CSP was the best decision for our website security.”
”Rapidsec makes tightening up your site with an A+ Content Security Policy so much simpler.”
