Pricing

from $2.10 / 1,000 endpoint auditeds

CORS Checker & Preflight Tester

Test simple and OPTIONS preflight CORS behavior with normalized policy evidence, risky-pattern findings, and truthful per-endpoint failures.

Pricing

from $2.10 / 1,000 endpoint auditeds

Rating

0.0

(0)

Developer

Michael Olmos

Actor stats

Bookmarked

Total users

Monthly active users

3 days ago

Last modified

CORS Preflight Evidence Auditor

Test simple and OPTIONS preflight CORS behavior with normalized policy evidence, risky-pattern findings, and truthful per-endpoint failures.

Reliability and safety

Simple and preflight response comparison.
Reflected and wildcard credential checks.
Vary Origin evidence.
Caller-selected method and request headers.
Explicit uncharged failures.
Inputs are deduplicated and bounded; the memory cap is locked to 256 MB.

Charging

PAY_PER_EVENT uses a one-time Actor-start event plus endpoint-audited. Only successful completed evidence rows are charged. Invalid inputs, network or protocol failures, and the OUTPUT summary are not charged.

Example input

{
  "endpoints": [
    "https://httpbin.org/anything"
  ],
  "testOrigin": "https://example.com",
  "method": "POST",
  "requestHeaders": [
    "content-type"
  ],
  "maxEndpoints": 1,
  "timeoutSecs": 20
}

Output

The default dataset contains normalized evidence rows. The OUTPUT record reports submitted, unique, attempted, completed, failed, input-limited, and budget-limited counts without hiding partial failures.

CORS Policy Checker - Audit Access-Control-* headers

scrappy_garden/cors-policy-checker

Check CORS response headers (Access-Control-Allow-Origin, -Credentials, -Methods, -Headers, -Expose-Headers, -Max-Age, Vary: Origin) for one or more URLs. Optionally performs a preflight OPTIONS check. Useful for debugging browser/API integrations and spotting risky CORS misconfigurations.

Bikram Adhikari

CORS Auditor

phoenix2810/cors-auditor

Audit a public URL's CORS configuration in one API call. Inspects Access-Control headers on simple and preflight requests, detects wildcard-with-credentials, reflected origins missing Vary: Origin, null-echo origins, and over-permissive methods or headers. Returns score, grade, and recommendations.

Sanskar Jaiswal

Robots.txt Tester & Validator

gifted_wagon/robots-txt-evidence-auditor

Parse robots.txt rules into normalized policy evidence, sitemap references, tested paths, and truthful failures.

Michael Olmos

CORS Security Auditor

q_services/cors-security-auditor

Detect reflected origins, credentialed wildcard CORS, null-origin trust and missing Vary headers across APIs.

Q Services

Meta Tag Extractor

gifted_wagon/website-metadata-evidence-extractor

Extract normalized page metadata with exact tag evidence, safe fetching, deterministic limits, and truthful per-URL failures.

Michael Olmos

API & Endpoint Discovery

lofomachines/api-endpoint-discovery

Discover, test, and fingerprint all API endpoints from any website. Supports bulk input, OpenAPI/Swagger parsing, GraphQL introspection, and deep auth/CORS/rate-limit detection. Use as a Claude MCP tool via Apify.

Lofomachines

Italy FatturaPA Validator - SDI Preflight for FPA12, FPR12

kamerozkan/italy-fatturapa-validator

Offline structural and deterministic content preflight for FPA12, FPR12, and FSM10 XML with pinned derived schemas and structured findings. Italian e-invoicing preflight before SDI submission: catches technical errors that commonly cause an SDI scarto, without claiming SDI acceptance.

Kamer Ozkan

Actor Input Schema Preflight — Store Test Readiness

vivid_astronaut/actor-input-schema-preflight

Detect missing or invalid prefills that can break Apify automated Store tests before publishing.

BRAINIALL Team

Store/Crawler Surface Preflight

checksmithcats/store-crawler-surface-preflight

Cross-check public robots.txt, sitemap, noindex, llms.txt, policy links, and contact signals from a storefront URL. Reads only public URLs; no account access.