diff --git a/requirements/base.txt b/requirements/base.txt
index 7465bb37..741918e9 100644
--- a/requirements/base.txt
+++ b/requirements/base.txt
@@ -15,8 +15,6 @@ asgiref==3.6.0
     #   django-cors-headers
 asn1crypto==1.5.1
     # via webauthn
-async-timeout==4.0.2
-    # via redis
 attrs==23.1.0
     # via
     #   glom
@@ -77,6 +75,7 @@ django==4.2.15
     #   django-appconf
     #   django-axes
     #   django-cors-headers
+    #   django-csp
     #   django-filter
     #   django-formtools
     #   django-jsonform
@@ -114,6 +113,8 @@ django-axes==6.5.1
     # via open-api-framework
 django-cors-headers==4.4.0
     # via open-api-framework
+django-csp==3.8
+    # via open-api-framework
 django-filter==24.2
     # via
     #   commonground-api-common
@@ -240,7 +241,7 @@ mozilla-django-oidc-db==0.19.0
     # via open-api-framework
 notifications-api-common==0.2.2
     # via commonground-api-common
-open-api-framework==0.6.1
+open-api-framework==0.8.0
     # via -r requirements/base.in
 orderedmultidict==1.0.1
     # via furl
diff --git a/requirements/ci.txt b/requirements/ci.txt
index 2b026713..a9e4b1cb 100644
--- a/requirements/ci.txt
+++ b/requirements/ci.txt
@@ -22,10 +22,6 @@ asn1crypto==1.5.1
     # via
     #   -r requirements/base.txt
     #   webauthn
-async-timeout==4.0.2
-    # via
-    #   -r requirements/base.txt
-    #   redis
 attrs==23.1.0
     # via
     #   -r requirements/base.txt
@@ -121,6 +117,7 @@ django==4.2.15
     #   django-appconf
     #   django-axes
     #   django-cors-headers
+    #   django-csp
     #   django-filter
     #   django-formtools
     #   django-jenkins
@@ -167,6 +164,10 @@ django-cors-headers==4.4.0
     # via
     #   -r requirements/base.txt
     #   open-api-framework
+django-csp==3.8
+    # via
+    #   -r requirements/base.txt
+    #   open-api-framework
 django-filter==24.2
     # via
     #   -r requirements/base.txt
@@ -245,6 +246,7 @@ django-solo==2.0.0
 django-two-factor-auth[phonenumberslite,webauthn]==1.16.0
     # via
     #   -r requirements/base.txt
+    #   django-two-factor-auth
     #   maykin-2fa
 django-webtest==1.9.10
     # via -r requirements/test-tools.in
@@ -385,7 +387,7 @@ notifications-api-common==0.2.2
     # via
     #   -r requirements/base.txt
     #   commonground-api-common
-open-api-framework==0.6.1
+open-api-framework==0.8.0
     # via -r requirements/base.txt
 orderedmultidict==1.0.1
     # via
diff --git a/requirements/dev.txt b/requirements/dev.txt
index 12e62375..acf7b0ab 100644
--- a/requirements/dev.txt
+++ b/requirements/dev.txt
@@ -24,10 +24,6 @@ asn1crypto==1.5.1
     # via
     #   -r requirements/ci.txt
     #   webauthn
-async-timeout==4.0.2
-    # via
-    #   -r requirements/ci.txt
-    #   redis
 attrs==23.1.0
     # via
     #   -r requirements/ci.txt
@@ -139,6 +135,7 @@ django==4.2.15
     #   django-appconf
     #   django-axes
     #   django-cors-headers
+    #   django-csp
     #   django-debug-toolbar
     #   django-extensions
     #   django-filter
@@ -187,6 +184,10 @@ django-cors-headers==4.4.0
     # via
     #   -r requirements/ci.txt
     #   open-api-framework
+django-csp==3.8
+    # via
+    #   -r requirements/ci.txt
+    #   open-api-framework
 django-debug-toolbar==4.1.0
     # via -r requirements/dev.in
 django-extensions==3.2.1
@@ -269,6 +270,7 @@ django-solo==2.0.0
 django-two-factor-auth[phonenumberslite,webauthn]==1.16.0
     # via
     #   -r requirements/ci.txt
+    #   django-two-factor-auth
     #   maykin-2fa
 django-webtest==1.9.10
     # via -r requirements/ci.txt
@@ -430,7 +432,7 @@ notifications-api-common==0.2.2
     # via
     #   -r requirements/ci.txt
     #   commonground-api-common
-open-api-framework==0.6.1
+open-api-framework==0.8.0
     # via -r requirements/ci.txt
 orderedmultidict==1.0.1
     # via