Looking for a ModHeader alternative?

ModHeader was removed from the Chrome Web Store and Microsoft Edge Add-ons in July 2026. If you used it to set request headers for testing, here is what happened and how to move your rules to HeaderForge in a few minutes.

Get HeaderForge for Chrome — free

What happened

According to reporting by The Hacker News and TechRadar, security firm Stripe OLT found code inside the published extension that could fingerprint the browser and collect the domains a user visited. Microsoft removed ModHeader from Edge Add-ons on July 3, 2026 and Google removed it from the Chrome Web Store on July 10, 2026. The reports put its installs at about 1.6 million across both stores.

The same reports say the collector only switched on for browsers on an internal list, and that list shipped empty, so it was not seen sending data. The developer had not responded publicly at the time of those reports. We have not tested ModHeader ourselves; this summary is theirs.

How HeaderForge is different

Nothing to phone home to. No analytics, no ads, no account. The only network request it makes is a licence check if you buy Pro, and three test requests to httpbin.org if you press the test button on its welcome page. Details: privacy policy and permissions.
Changing headers is free for good. Request and response headers, regex patterns, profiles, one-click CORS for a site, block and redirect rules.
It shows whether a rule actually ran. Each rule says in plain words what it does, and Pro shows how often it fired on the tab and a live list of the requests it touched.

	HeaderForge free	HeaderForge Pro
Set, add to or remove request and response headers	Yes, unlimited	Yes
URL patterns and regular expressions	Yes	Yes
Profiles, pause, this tab only	Yes	Yes
Import ModHeader profile exports	Yes	Yes
One-click CORS, presets, block and redirect	Yes	Yes
Did my rule fire? (counts and live request list)	Preview	Yes
Test a URL against your rules	5 a month	Unlimited
Variables such as `{{token}}`	—	Yes

Pro prices are on the pricing page.

What about Requestly?

Requestly is the other name people reach for, and it is a capable tool — but it has moved on from individual users. Its published pricing (checked 23 September 2026) starts at five users: $10 per user per month for Team, $15 for Team Pro, which is $600 to $900 a year. There is a 30-day trial, and the extension itself still installs, but the paid product is aimed at teams buying a platform, not at one developer who needs a header changed this afternoon.

That is a perfectly reasonable business decision, and it is why this page exists: between ModHeader being pulled and Requestly pricing for teams, a single developer who just wants to set a header has fewer honest options than a year ago. HeaderForge is free for everything that changes a request — unlimited rules, one-click CORS, presets, block and redirect, profiles, import of your old ModHeader files — and $5 a month only if you want the diagnostics that tell you which rule actually fired.

Move your rules in three steps

Find a ModHeader export. If you saved one before, use it. If ModHeader is still installed somewhere (another computer or browser), open it and export your profile to a JSON file.
Install HeaderForge from the Chrome Web Store, open its Settings, and go to Import.
Paste or choose the file. HeaderForge turns each header into a rule. Profiles that only applied to certain sites come in switched off, because a rule meant for one site shouldn't suddenly go to every site; add a site pattern and switch them on.

Change any secrets you kept in ModHeader. If your profiles held API keys, tokens or passwords, treat them as exposed and rotate them, whatever tool you use next.

No export? Recreate your rules in HeaderForge's popup; each one takes a few seconds, and the popup describes it back to you in a sentence so you can check it.