Pricing

from $2.10 / 1,000 endpoint auditeds

CORS Checker & Preflight Tester

Test simple and OPTIONS preflight CORS behavior with normalized policy evidence, risky-pattern findings, and truthful per-endpoint failures.

Pricing

from $2.10 / 1,000 endpoint auditeds

Rating

0.0

(0)

Developer

Michael Olmos

Actor stats

Bookmarked

Total users

Monthly active users

3 days ago

Last modified

Categories

Developer tools

Automation

Other

Apify Store pricing discounts use a tiered approach. Higher subscription plans unlock lower Actor costs. See our subscription plans.

Pricing	Free No discount	Starter Bronze discount	Scale Silver discount	Business Gold discount

Endpoint audited	$3.00 / 1,000	$2.70 / 1,000	$2.40 / 1,000	$2.10 / 1,000
Actor start Infrequent	$0.0004	$0.0004	$0.0004	$0.0004
Additional costs
Platform usage	Free	Free	Free	Free

This Actor's pricing details are outlined in the table below. The unit prices you pay depend on your subscription plan, with higher tiers offering better rates. Visit our pricing page to compare plans and see how much you can save.

Pricing	Free No discount	Business Gold discount

Endpoint audited One valid public target is successfully processed, stored, and returned with normalized evidence. Invalid inputs and network, syntax, or protocol failures are not charged.	$3.00 / 1,000	$2.10 / 1,000
Actor startInfrequent Charged when the Actor starts running. Number of events charged depends on Actor memory (one event per GB, minimum one event).	$0.0004	$0.0004
Additional costs
Platform usageIncluded Platform usage costs are tied to the Actor's performance in terms of the underlying platform resources it consumes. Learn more	Free

CORS Policy Checker - Audit Access-Control-* headers

scrappy_garden/cors-policy-checker

Check CORS response headers (Access-Control-Allow-Origin, -Credentials, -Methods, -Headers, -Expose-Headers, -Max-Age, Vary: Origin) for one or more URLs. Optionally performs a preflight OPTIONS check. Useful for debugging browser/API integrations and spotting risky CORS misconfigurations.

Bikram Adhikari

CORS Auditor

phoenix2810/cors-auditor

Audit a public URL's CORS configuration in one API call. Inspects Access-Control headers on simple and preflight requests, detects wildcard-with-credentials, reflected origins missing Vary: Origin, null-echo origins, and over-permissive methods or headers. Returns score, grade, and recommendations.

Sanskar Jaiswal

Robots.txt Tester & Validator

gifted_wagon/robots-txt-evidence-auditor

Parse robots.txt rules into normalized policy evidence, sitemap references, tested paths, and truthful failures.

Michael Olmos

CORS Security Auditor

q_services/cors-security-auditor

Detect reflected origins, credentialed wildcard CORS, null-origin trust and missing Vary headers across APIs.

Q Services

Meta Tag Extractor

gifted_wagon/website-metadata-evidence-extractor

Extract normalized page metadata with exact tag evidence, safe fetching, deterministic limits, and truthful per-URL failures.

Michael Olmos

API & Endpoint Discovery

lofomachines/api-endpoint-discovery

Discover, test, and fingerprint all API endpoints from any website. Supports bulk input, OpenAPI/Swagger parsing, GraphQL introspection, and deep auth/CORS/rate-limit detection. Use as a Claude MCP tool via Apify.

Lofomachines

Italy FatturaPA Validator - SDI Preflight for FPA12, FPR12

kamerozkan/italy-fatturapa-validator

Offline structural and deterministic content preflight for FPA12, FPR12, and FSM10 XML with pinned derived schemas and structured findings. Italian e-invoicing preflight before SDI submission: catches technical errors that commonly cause an SDI scarto, without claiming SDI acceptance.

Kamer Ozkan

Actor Input Schema Preflight — Store Test Readiness

vivid_astronaut/actor-input-schema-preflight

Detect missing or invalid prefills that can break Apify automated Store tests before publishing.

BRAINIALL Team

Store/Crawler Surface Preflight

checksmithcats/store-crawler-surface-preflight

Cross-check public robots.txt, sitemap, noindex, llms.txt, policy links, and contact signals from a storefront URL. Reads only public URLs; no account access.