Audit a CORS policy
https://www.brainiac.software/api/v1/security-configuration/cors-policy-auditOverview
Read CORS response headers. When an origin is supplied, it is sent once on the public GET. A wildcard, or a reflected origin with credentials, is confirmed. No other origins are tried.
Protocol
x402 (POST)
Price
$0.04
Payment Asset
USD Coin
Payment Network
eip155:8453
Category
security-configuration
Provider
BRAINIAC.software
Source
bazaar
Indexed
2026-11-05 11:42:08
Health
Status
healthy
Latency (p50)
—
Uptime (30d)
—
Reliability Score
—
Last Checked
Never
Last Healthy
Never
Consecutive Failures
0
x402 Payment Validation
Payment Requirements
—
Asset Verified
—
Facilitator
—
Input Schema
{
"body": {
"headers": [
{
"name": "Access-Control-Allow-Origin",
"value": "*"
},
{
"name": "Access-Control-Allow-Credentials",
"value": "true"
}
]
},
"bodyType": "json",
"method": "POST",
"type": "http"
}
Output Schema
{
"example": {
"allowCredentials": "true",
"allowMethods": "",
"allowOrigin": "*",
"checkedAt": "2026-11-03T16:00:00.000Z",
"confirmedCount": 2,
"finalUrl": "",
"findings": [
{
"code": "cors_wildcard",
"detail": "The response allows any origin.",
"kind": "confirmed",
"subject": "access-control-allow-origin"
},
{
"code": "cors_wildcard_credentials",
"detail": "The response allows any origin and also allows credentials.",
"kind": "confirmed",
"subject": "access-control-allow-credentials"
},
{
"code": "cors_origin_untested",
"detail": "No origin was supplied, so reflection was not tested.",
"kind": "unavailable",
"subject": ""
}
],
"httpStatus": 0,
"limitations": [
"These checks do not show that a website is secure.",
"Only one public GET is sent per supplied URL or path. No login, brute force, exploit, or credential test is attempted.",
"A path or endpoint is requested only when the caller lists it.",
"Cookie values are not copied into the response.",
"An unavailable check means that configuration was not in the response."
],
"recommendationCount": 0,
"requestedUrl": "",
"requestsSent": 0,
"securityDetermined": false,
"status": "checked",
"unavailableCount": 1,
"websiteSecure": false
},
"type": "json"
}