Inspect Secure, HttpOnly and SameSite flags on public Set-Cookie headers.
Review Set-Cookie flags: Secure, HttpOnly, SameSite, and domain breadth.
This score is a defensive configuration review — not a penetration test, CVE audit, or guarantee of security.
This scanner is part of the Cyber Security PRO add-on.
Scanning…
More from the same category
Full defensive configuration scan: TLS, headers, cookies, DNS and email auth.
Detect WordPress and review public exposure/config signals without fake CVEs.
Passive API configuration audit — HTTPS, headers, CORS signals (no exploitation).
Analyze CSP, HSTS and related HTTP security headers with remediation snippets.
Certificate health and TLS posture using the shared SSL engine.
Deep Content-Security-Policy review with remediation guidance.
Learn more — open a section when you need details
Parse cookie security attributes from live HTTPS responses. Preference cookies are not over-flagged.
Enter a public HTTPS URL.
Click Scan.
Review Secure, HttpOnly, and SameSite findings.
Session cookies usually need stricter flags than marketing preferences.
Light tool — does not debit full-scan allowance.
Only observes cookies returned on the fetched response.