CORS Checker

What this check reports

Send an Origin header and inspect cross-origin read permissions. Enter the intended URL, review the findings, then use a related tool for the next question.

Limits

One public GET response from our server. A CDN, user agent, login or request origin can change the headers. CORS preflight and authenticated browser behavior are not tested. No typical cache-hit rate, speed score or compression ratio is inferred.

Review cache and CORS policies with your application's expected privacy and cross-origin behavior before changing production settings.