← jwatte.com

Cookie Flags Audit

Enter a page URL to see every cookie the server sets on an anonymous first visit, which flags each one is missing, and the exact Set-Cookie line to change.

Context and background

Read the story behind this tool: Why Cookie Flags Audit exists.

Related: Security Headers Audit / Cookie and Storage Drift Audit / Mega Security Analyzer

The page is fetched once as an anonymous visitor with no consent given and no cookies sent. Only cookies the server sets in response headers are graded; cookies written by JavaScript after load are listed separately from the inline scripts the tool can read.