Pricing

Pay per usage

CORS Auditor

Audit a public URL's CORS configuration in one API call. Inspects Access-Control headers on simple and preflight requests, detects wildcard-with-credentials, reflected origins missing Vary: Origin, null-echo origins, and over-permissive methods or headers. Returns score, grade, and recommendations.

Pricing

Pay per usage

Rating

0.0

(0)

Developer

Sanskar Jaiswal

Actor stats

Bookmarked

Total users

Monthly active users

7 days ago

Last modified

Categories

Developer tools

SEO tools

Open source

You can access the CORS Auditor programmatically from your own applications by using the Apify API. You can also choose the language preference from below. To use the Apify API, you’ll need an Apify account and your API token, found in API & Integrations in Apify Console.

Python

JavaScript

CLI

OpenAPI

HTTP

MCP

1import { ApifyClient } from 'apify-client';
2
3// Initialize the ApifyClient with your Apify API token
4// Replace the '<YOUR_API_TOKEN>' with your token
5const client = new ApifyClient({
6    token: '<YOUR_API_TOKEN>',
7});
8
9// Prepare Actor input
10const input = {
11    "startUrl": "https://example.com",
12    "probeOrigin": "https://probe.cors-auditor.local",
13    "probeMethod": "POST"
14};
15
16// Run the Actor and wait for it to finish
17const run = await client.actor("phoenix2810/cors-auditor").call(input);
18
19// Fetch and print Actor results from the run's dataset (if any)
20console.log('Results from dataset');
21console.log(`💾 Check your data here: https://console.apify.com/storage/datasets/${run.defaultDatasetId}`);
22const { items } = await client.dataset(run.defaultDatasetId).listItems();
23items.forEach((item) => {
24    console.dir(item);
25});
26
27// 📚 Want to learn more 📖? Go to → https://docs.apify.com/api/client/js/docs

CORS Audit API API in JavaScript

The Apify API client for JavaScript is the official library that allows you to use CORS Auditor API in JavaScript or TypeScript, providing convenience functions and automatic retries on errors.

Install the apify-client

$npm install apify-client

Other API clients include:

CORS Auditor API in Python

CORS Auditor API through CLI

CORS Auditor OpenAPI definition

CORS Auditor API

CORS Security Auditor

q_services/cors-security-auditor

Detect reflected origins, credentialed wildcard CORS, null-origin trust and missing Vary headers across APIs.

Q Services

CORS Policy Checker - Audit Access-Control-* headers

scrappy_garden/cors-policy-checker

Check CORS response headers (Access-Control-Allow-Origin, -Credentials, -Methods, -Headers, -Expose-Headers, -Max-Age, Vary: Origin) for one or more URLs. Optionally performs a preflight OPTIONS check. Useful for debugging browser/API integrations and spotting risky CORS misconfigurations.

Bikram Adhikari

HTTP Security Headers Auditor

phoenix2810/http-security-headers-auditor

Audit a public website's HTTP security response headers in one API call. Returns a letter grade, numeric score, per-header analysis, and actionable recommendations. Built for security teams, devops, and site migration QA.

Sanskar Jaiswal

HTTP Header Diff Monitor

junipr/http-header-diff-monitor

Compare previous/current HTTP headers and show exact added/removed/changed security/cache/CORS headers.

junipr

HTTP Inspect MCP — Headers, Security, Redirects

q_services/http-inspect-mcp

MCP server: HTTP headers, status, redirects, security headers, CORS, cache, mixed content. For AI QA/secops agents.

Q Services

HTTP Headers Inspector - All Response Headers & Security

ninhothedev/http-headers-inspector

$0.5/1K 🔥 HTTP headers inspector! All response headers, server, cache, CDN & security headers for any URL. No key. JSON, CSV, Excel or API in seconds. Debug & audit any site ⚡

ninhothedev

HTTP Security Headers Analyzer

perryay/http-security-headers-analyzer

Audit web security headers against OWASP standards. Score pages (A-F) for HSTS, CSP, X-Frame-Options, CORS, and 12+ critical security headers with per-header severity analysis, policy compliance (PCI-DSS/SOC 2/ISO 27001/NIST), and actionable remediation guidance.

Perry AY

HTTP Headers Security Audit

seeb/http-headers-security-audit

Audit public websites for important HTTP security headers and export practical risk scores, missing headers, and improvement notes for security, SEO, and QA workflows.