Tools / Security & Crypto

Cookie Security Checker

Secure, HttpOnly, SameSite and prefix checks for Set-Cookie headers

The lookup is made by our server against public DNS; only the domain/IP you enter is used.

About this tool

Inspect the Set-Cookie headers a site sends and check the Secure, HttpOnly and SameSite flags plus the __Host- and __Secure- prefixes. Only cookies set while loading the URL are visible to a server-side check.

Related tools

Mixed Content CheckerFind HTTP resources loaded on HTTPS pagesPrivacy & Tracker ScanList third-party trackers, consent tools and the privacy policy linkSecurity Headers CheckerHSTS, CSP, X-Frame-Options and more — graded A to F