CORS & Security Headers Evaluator

Evaluate CORS and HTTP security headers for misconfigurations and vulnerabilities. Paste response headers to get a scored security posture report.

This tool requires JavaScript to run. All processing happens locally in your browser.