CORS Checker

Analyze CORS response headers for misconfigurations. Detect wildcard origins, exposed headers, credential leaks, and preflight issues.

CORS Headers Access-Control

Input

Output

This tool runs entirely in your browser. No data is sent to any server.

How this works

CORS Misconfigurations and Security Risks Detect dangerous CORS configurations: wildcard origins with credentials, reflected origins, null origin attacks, and overly permissive access-control headers.

Need more than the browser can do?

HTTP Traffic Interception External tools compared, with limits and pricing

Comparing (/4):

Tool Comparison

Feature
Type
Pricing
Platforms
Description