Cookies

Every cookie, read the way a browser reads it.

Secure, HttpOnly, SameSite, __Host-/__Secure- prefixes, lifetimes and size budgets — every Set-Cookie your site sends, graded per attribute, with the exact one to add.

Every Set-Cookie graded
Prefix rules enforced
Size budgets checked
Free, no account

Try: this site · example.com | Header scanner → · Email check → · Accessibility →

Try it live — real grades

github.com check → stripe.com check → nytimes.com check → wikipedia.org check →