# CORSy

CORSy is a Security Scanning product. It runs on-premises. Pricing is free.

A Python-based command-line tool that scans websites for CORS misconfigurations by analyzing HTTP response headers to identify potential security vulnerabilities.

Checked October 2026.

## What is CORSy?

CORSy is a command-line scanner designed to identify CORS (Cross-Origin Resource Sharing) misconfigurations in web applications. The tool is implemented as a Python script that utilizes the requests library to send HTTP requests to target websites and analyze CORS-related headers for potential security vulnerabilities.

The scanner operates by examining the response headers from web servers to detect improper CORS configurations that could expose applications to cross-origin attacks. It provides a straightforward approach to testing CORS implementations and identifying security gaps in web application configurations.

CORSy requires Python and can be installed by cloning the repository and installing dependencies through pip. The tool accepts target URLs as command-line arguments and performs automated scanning to assess CORS security posture.

Tags: Scanner, Misconfiguration

## Where it fits in your security program (NIST CSF 2.0)

- [Identify](https://cybersectools.com/guides/building-identify-program-small-team): helps you know your assets and your risks.
- [Protect](https://cybersectools.com/guides/building-protect-program-small-team): helps you prevent attacks and keep data safe.

## Quick facts

- Category: [Exposure & Vulnerability Management](https://cybersectools.com/categories/exposure-vulnerability-management) · [Security Scanning](https://cybersectools.com/categories/security-scanning)
- Deployment: On-Premises
- Company size fit: Startup, SMB, Mid-Market
- Pricing model: Free
- GitHub stars: 1,465
- Website: github.com

## CORSy FAQ

### What is CORSy?

CORSy is a product in the Security Scanning category. It covers Scanner and Misconfiguration.

### What is the pricing for CORSy?

CORSy is free. Download and setup instructions are at https://github.com/s0md3v/Corsy/.

### What are alternatives to CORSy?

Alternatives to CORSy listed on CybersecTools:

1. [Domain Verity](https://cybersectools.com/tools/domain-verity) - Monitors domains for TLS, email auth, DNS, and cert misconfigurations. (Commercial)
2. [DNSAudit.io](https://cybersectools.com/tools/dnsauditio) - Free DNS security scanner that checks domains for misconfigs and exposure. (Free)
3. [Sekant Online Phishing Scanner](https://cybersectools.com/tools/sekant-online-phishing-scanner) - Web-based URL scanner that checks if a site is phishing or malicious. (Free)
4. [RoboShadow OWASP ZAP Vulnerability Scanner](https://cybersectools.com/tools/roboshadow-owasp-zap-vulnerability-scanner) - Web app & network vulnerability scanner integrating OWASP ZAP, Shodan & Nmap (Commercial)
5. [Intruder XSS Scanner](https://cybersectools.com/tools/intruder-xss-scanner) - XSS vulnerability scanner for web apps and APIs with automated scanning (Commercial)

Compare all CORSy alternatives at [https://cybersectools.com/alternatives/corsy](https://cybersectools.com/alternatives/corsy)

### What deployment and organization size does CORSy fit?

CORSy is available as on-premises software. It is listed for startups, small businesses and mid-market companies. It is free.

## Compare CORSy with similar solutions

- [CORSy vs Domain Verity](https://cybersectools.com/compare/corsy-vs-domain-verity)
- [CORSy vs DNSAudit.io](https://cybersectools.com/compare/corsy-vs-dnsauditio)
- [CORSy vs Sekant Online Phishing Scanner](https://cybersectools.com/compare/corsy-vs-sekant-online-phishing-scanner)

All alternatives to CORSy: [/alternatives/corsy](https://cybersectools.com/alternatives/corsy)

---

Source: https://cybersectools.com/tools/corsy

For AI agents: every CybersecTools shortlist is listed at https://cybersectools.com/shortlists.md, and any compare page has a Markdown copy too (add .md to its URL).

More on CORSy: funding, momentum, hiring and news, plus the full product and company record, are available through the Mandos MCP Server (paid plans), which connects to AI assistants: https://mandos.io/mcp?utm_source=cybersectools.com&utm_medium=product-md