Free Tools

SRI Validator

Check your tags

Paste straight from your template. We only fetch the files the tags point at, never your page. Have a URL rather than a tag? Use the SRI Hash Generator.

Needed for relative URLs like /js/app.js. It also tells us which files are on another origin, so the verdicts can be definite rather than conditional.

What this checks

Subresource Integrity fails in a way you don't see until something breaks. An integrity attribute that no longer matches the file the CDN serves, or one on a file from another origin without a crossorigin attribute, and the browser quietly refuses to load it.

We fetch each file your tags name and check them the way the browser does: only the strongest hash counts, and a file from another origin can only be checked if its server allows CORS. Every tag gets a verdict, and where editing the tag fixes it, the fixed tag is ready to copy.

To see which scripts across your whole site have no integrity at all, read about Integrity Policy.

Checked your tags? Now check every script, on every page load.

This tool checks the tags you paste, once. Report URI's Integrity Suite watches what your visitors' browsers actually load, all the time.

  • Integrity PolicyFinds the scripts on your site with no SRI, including the ones you didn't paste here.
  • CSP IntegrityReports the hash of every script your visitors load. Custom Integrity Hashes label your own files, so anything unexpected stands out.
  • Script WatchAlerts you as soon as a new script appears on your pages.
Start Free Trial Learn More