Disclosure

corsverdict is free. Some outbound links — for example to API gateways, backend/hosting providers, or developer tools — may be affiliate links: if you sign up through them we may earn a commission at no extra cost to you. A commission never changes what the checker reports.

Informational, not a security audit. corsverdict resolves the WHATWG Fetch/CORS rules statically from the headers you paste; it does not make a live request and cannot account for server-side redirects, proxies/CDNs, or browser quirks. We are not affiliated with the WHATWG, any browser vendor, or any hosting provider. Confirm against your real server and devtools.

Your privacy: this is a static, client-side tool — everything you paste stays in your browser and is never uploaded.