Cookie Audit

Audit every cookie a page sets. Checks Secure, HttpOnly and SameSite attributes per cookie and grades the page overall. Catches insecure cookies before they leak in transit or via XSS.

This audit reads only the Set-Cookie headers of the server response. To see every cookie a browser ends up with, including Google Analytics, Meta Pixel and other scripts, and which load before consent, run the Cookie Scanner.