Online Tool Store
Cookie Flag Auditor
Controleer cookie-attributen (Secure, HttpOnly, SameSite) om beveiligingsinstellingen te vinden die session hijacking en CSRF voorkomen.
🔒 Deze tool werkt volledig in je browser. Je bestanden worden nooit naar een server geüpload.
Security & Privacy
Cookie Flag Auditor
Frontend preview — no upload or external service.
Audit result
session=abc123: missing Secure, missing HttpOnly, no SameSite. Readable by script, sendable over plain HTTP, and attached to cross-site requests — three separate problems.
How Cookie Flag Auditor works
- Open Cookie Flag Auditor and review the example state before entering your own values.
- Enter or select the information needed for Cookie Flag Auditor.
- Review the result and adjust the inputs if you want to compare another case.
Audit a Set-Cookie header or a cookie list for the Secure, HttpOnly and SameSite flags, and see what each missing flag exposes. The interactive workspace runs in your browser, so you can review the result without creating an account.
FAQ
What is Cookie Flag Auditor used for?
Audit a Set-Cookie header or a cookie list for the Secure, HttpOnly and SameSite flags, and see what each missing flag exposes.
Do I need an account?
No. The tool is available directly in the browser without an account or sign-up.
What should I do if the result looks unexpected?
Check the entered values and compare them with the guidance shown in Cookie Flag Auditor. Use the result as a planning aid and verify important decisions independently.