What it reads
Each cookie the landing page's response sets, and its three flags.
Check 22 of 54 · Web and TLS
Cookies, explained.
Your cookies carry the flags that stop them being stolen or misused.
Engine 1.57.0, read 25 October 2026
Free checkScoredReliability: Moderate
Is your website set up safely?
What the check does, and where it stops.
Why it matters
A session cookie without Secure, HttpOnly and SameSite can be read or sent where it should not be.
What a failure looks like
A failure is a finding in your result. The check is scored, so it can lower your score, and the Full Report gives every finding its severity and a fix. If the check cannot finish, it is recorded as unknown: it carries no penalty, and it is never a pass.
Where its limits are
Only sees cookies set before login. Cookies a script sets later are not read.
ReliabilityModerate: confirm before acting
Check 22 is one of 15 in Web and TLS. See it in its row on the scanner page, beside the rest of Web and TLS.
See how your domain does.
The free check includes this one and takes about 30 seconds. No account. Nothing to install.