Audit cookie security attributes
Inspect attributes of pasted Set-Cookie headers.
Input & settings
How to use this tool
Inspect attributes of pasted Set-Cookie headers.
Limits and behavior
Results are generated in your browser, not uploaded to CraftAI. Inputs are size-limited and validated. Inspect attributes of pasted Set-Cookie headers. Enter your own input, adjust settings, then process. Inspect and save the generated result. Reset or cancel to clear results. Checks Secure, HttpOnly, SameSite and cookie prefixes. Does not read your browser cookies or contact a site.
Review cookie hardening flags
Inspect individual cookie attributes to identify missing or potentially risky settings in header text.
Are Secure and HttpOnly sufficient to protect sessions?
No. Authentication and session security also require appropriate expiry, CSRF protections and server controls.
Related tools: analyze content security policy · generate content security policy