Requestly is a capable tool, and it has grown into a full API platform for teams: API clients, mocks, test collections, shared workspaces. If that's what you need, it's a good choice. If you only need to change a header or unblock CORS in your own browser this afternoon, something smaller fits better. We make one of those smaller tools, so weigh this accordingly.
Its pricing page, checked on 28 September 2026, lists Team at $10 and Team Pro at $15 per user per month, billed annually, with a 30-day trial. Its own examples are priced for five users ($600 to $900 a year). That makes sense for a company buying an API platform. It's a lot of product for a single developer who needs Authorization set on one domain.
Chrome can override response headers by itself. Open DevTools, go to Network, right-click a request, choose Override headers, and allow access to a local folder where Chrome keeps the overrides. Limits: it can't change request headers, and it only works while DevTools is open on that tab.
HeaderForge does the browser half of what people used Requestly for, and nothing else:
What it doesn't have: API collections, mock servers, shared team workspaces, or mobile app interception. If you need those, stay with Requestly or use a proxy.
To change traffic from a mobile app, a desktop app or a script, a browser extension can't help. mitmproxy (free, open source), Charles and Proxyman sit between the app and the network and can rewrite anything. They take longer to set up, because you have to install and trust a certificate.
| Requestly | HeaderForge | DevTools | |
|---|---|---|---|
| Change request headers | Yes | Free, unlimited | No |
| Change response headers | Yes | Free, unlimited | Yes, while open |
| One-click CORS for a site | Via rules | Free | No |
| Block and redirect | Yes | Free | Block only |
| API client, mocks, team workspaces | Yes | No | No |
| Account needed | For team features | Never | No |
| Paid plan | $10–15 per user per month | $5/month, $39/year or $59 once | Free |
Requestly details from its pricing page, checked 28 September 2026. If anything is out of date, email us and we'll fix it.
Modify request and response headers, allow CORS for one site, block and redirect requests, and see whether each rule fired. No account, no tracking.
Get HeaderForge for ChromeMore: ModHeader alternative · add a custom request header in Chrome · disable CORS in Chrome.
More on this topic: 401 vs 403: which status code means what, and how to fix each · Hard refresh in Chrome, and how to really bypass the cache · What is a HAR file, how to open one, and what it exposes · JWT decoder and generator