CORSy
A Python-based command-line tool that scans websites for CORS misconfigurations by analyzing HTTP response headers to identify potential security vulnerabilities.
A Python-based command-line tool that scans websites for CORS misconfigurations by analyzing HTTP response headers to identify potential security vulnerabilities.
Checked October 2026.
CORSy is a command-line scanner designed to identify CORS (Cross-Origin Resource Sharing) misconfigurations in web applications. The tool is implemented as a Python script that utilizes the requests library to send HTTP requests to target websites and analyze CORS-related headers for potential security vulnerabilities.
The scanner operates by examining the response headers from web servers to detect improper CORS configurations that could expose applications to cross-origin attacks. It provides a straightforward approach to testing CORS implementations and identifying security gaps in web application configurations.
CORSy requires Python and can be installed by cloning the repository and installing dependencies through pip. The tool accepts target URLs as command-line arguments and performs automated scanning to assess CORS security posture.
No core features are listed for this product yet, so check the vendor's documentation for the full feature list.
No integrations are listed for this product yet. Check the vendor's documentation, or ask the vendor which integrations and APIs it supports.
Common questions about CORSy: features, pricing and alternatives.
CORSy is a product in the Security Scanning category. It covers Scanner and Misconfiguration.
CORSy is free. Download and setup instructions are at https://github.com/s0md3v/Corsy/.
Alternatives to CORSy listed on CybersecTools:
Compare all CORSy alternatives at https://cybersectools.com/alternatives/corsy
CORSy is available as on-premises software. It is listed for startups, small businesses and mid-market companies. It is free.
Side by side: features, pricing model and the company behind each one.
A multi-threaded scanner for identifying CORS flaws and misconfigurations
CorsMe is a specialized scanner that identifies Cross-Origin Resource Sharing (CORS) misconfigurations in web applications and provides remediation recommendations.
A security scanner that identifies Cross-Origin Resource Sharing (CORS) misconfigurations in web applications to detect potential vulnerabilities.
A Go-based web crawler that supports multiple protocols and authentication methods for systematic web resource discovery and collection.
Command line tool for testing CRLF injection on a list of domains.
CryptoLyzer is a cryptographic protocol analyzer that examines TLS, SSL, SSH, and DNSSEC server implementations with fingerprinting capabilities and multiple output formats.
Get a summary of this page from your assistant.
Mandos MCP: ask about all 9,023 products.
Connect your AI
