Comparisons
CSP reporting tools, compared
Five honest comparisons. Every competitor figure below is quoted from that vendor's own published pricing page and carries the date it was read; every HeaderHawk figure is generated from the same data as our pricing page, so the two cannot disagree.
Each page also says what the other product does better, because a comparison that finds no advantage anywhere is the one readers stop trusting. Some of you should buy theirs, and those pages say which.
- HeaderHawk vs Report URIThe incumbent, now sold as a client-side security platform. Far more product; a much higher floor.
- HeaderHawk vs URIportsThe closest on price and the broadest in scope. CSP is one of many report types for them, and the whole product here.
- HeaderHawk vs CsperThe other developer-first CSP tool. It writes and grades policies; this one reads reports. Two small products, honestly compared.
- HeaderHawk vs CentralCSPStrong on policy building and PCI tooling: a builder, scanner, evaluator and Chrome extension around the endpoint.
- HeaderHawk vs building it yourselfThe real default: a Lambda writing to S3. The endpoint is an afternoon; everything after it is the product.
All of them at once
The cheapest way into each product, as each vendor publishes it. Read on11 September 2026. Prices change — check theirs before you decide.
| HeaderHawk | Report URI | URIports | Csper | CentralCSP | a DIY endpoint | |
|---|---|---|---|---|---|---|
| Free plan | Free: $0, 3 sites, 10,000 reports a month, 15-day retention, no card | None | None | None | None | AWS free tier: “one million requests” and “400,000 GB-seconds per month” |
| Cheapest paid plan | Team, $39/month or $390/year | Starter, $54.99/mo (billed $659.88/yr) | Sand, USD 15/year (personal and hobby projects); Pebble, USD 7/mo (USD 72 annually) | Basic, $50/month (annual billing saves 10%) | Starter, €4.99/month (yearly billing saves two months) | “$0.20 per one million requests” plus “$0.0000166667 per GB-s”, plus storage, plus your time |
| Sites on that plan | 10 sites | 1 domain protected | 3 domains on Sand; 5 on Pebble | 3 websites | 2 applications | As many as you deploy |
| Reports a month | 100,000 | 100,000 events | 10,000 on Sand; 100,000 on Pebble | 100,000 reports / month | 15,000 / month | Whatever you provision for |
| Report retention | 30 days | 15 days | 30 days | 90 day report retention | 90 days | As long as you pay to store it |
| Team members | 10 | Team access starts on Professional, $109.99/mo | Team Access starts on Stone, USD 33/mo | Unlimited users | 1 | Your own IAM |
| Trial | 30-day Team trial, no credit card | 30-day free trial, no credit card | Free one-month trial, no payment method required | 14-day free trial | 14-day free trial on Starter and Advanced | Not applicable |
Sources, one per vendor: report-uri.com/pricing, uriports.com/pricing, csper.io/pricing, centralcsp.com/pricing, aws.amazon.com/lambda/pricing.
Where HeaderHawk loses, on every one of these pages
There is no data export of any kind, no API for reading your data, no HTTP response-header monitoring despite the name, no configurable alert thresholds and no spike detection. Several of the products above have some or all of those. If one is a requirement, you can stop reading here — and the page for that vendor will say so too.