Support

Audit HTTP response headers offline, explain CSP and CORS interactions, and build a precise hardening plan without sending URLs away.

Start with the included sample

The app opens with a complete local sample workspace, so every main workflow can be reviewed without an account or external hardware.

Reset local data

Use the restore sample action in the editable workspace screen. This replaces the app's local workspace only.

Contact

Email support@shadowfetch.com with the app name, iOS version, device model, and steps that reproduce the issue. Do not include confidential field data.

Headerharbor reviews recorded headers and request context; browsers, caches, redirects, service workers, proxies, and origin rules may alter behavior. Confirm findings in supported browsers and on the final response path.