CORS Configuration Checker
Probe a URL's CORS configuration and flag dangerous combinations such as a wildcard origin paired with credentials, or origin reflection that effectively disables the same-origin policy.
About the CORS Configuration Checker
Probe a URL's CORS configuration and flag dangerous combinations such as a wildcard origin paired with credentials, or origin reflection that effectively disables the same-origin policy.
Queries run from our global edge network, so you see what a neutral observer on the public internet sees — not what your local network or ISP resolver happens to have cached.
Frequently asked questions
What does the CORS Configuration Checker do?
Probe a URL's CORS configuration and flag dangerous combinations such as a wildcard origin paired with credentials, or origin reflection that effectively disables the same-origin policy.
Is the CORS Configuration Checker free to use?
Yes. The CORS Configuration Checker is completely free with no account, no signup and no usage limits for normal use.
Do you log the lookups I run?
No. Queries are processed at the edge and returned straight to you. We do not retain, profile or sell your lookup history.