Four steps take a site from installed to sending a policy in report-only mode.
-
Install
Install and activate the plugin. See Installation.
-
Connect
Paste a Consepo WordPress plugin token under Account. See Connect your Consepo account.
-
Scan
On the Overview, choose Scan this site. Consepo crawls the site and suggests a policy.
-
Report only
Under Policy, choose Report-only and save. Browsers now report what the policy would block, and nothing breaks. Continue with Roll out a policy.
Nothing that changes what visitors receive is on after activation: the policy mode starts at Off, and nonces and integrity pinning start disabled.