Cookie Security Flags Checker
Pricing
Pay per usage
Cookie Security Flags Checker
Fetch URLs and analyze Set-Cookie response headers for security attributes: Secure, HttpOnly, SameSite, plus __Host- / __Secure- prefix rules. Produces per-cookie results with warnings/errors and writes SUMMARY + REPORT for quick auditing.
Pricing
Pay per usage
Rating
0.0
(0)
Developer

Bikram Adhikari
Actor stats
0
Bookmarked
2
Total users
1
Monthly active users
11 hours ago
Last modified
Categories
Share
Audit Set-Cookie response headers for common security attributes:
SecureHttpOnlySameSite(Lax/Strict/None)- Prefix rules for
__Host-and__Secure-
The Actor produces per-cookie dataset items with warnings/errors, and writes SUMMARY + REPORT into the default key-value store.
Output
Each dataset item represents either:
- One cookie (when at least one
Set-Cookieheader exists), or - A single “no cookies” record (when none exist)
Fields include cookieName, secure, httpOnly, sameSite, domain, path, prefix, securityScore, and issues.
Input
- Start URLs: one or more URLs to request.
- Follow redirects: follow redirects to final URL before analyzing.
- Proxy: optional Apify proxy.
Run locally
$apify run
Notes
- Cookie values are not stored (only
valueLength) to reduce risk of capturing sensitive data. - This Actor checks cookie attribute presence; it does not validate application logic.
Quick start
Store page: https://apify.com/scrappy_garden/cookie-security-flags-checker
Paste this into Input and click Run:
{"startUrls": [{"url": "https://example.com/"}],"proxyConfiguration": {"useApifyProxy": false}}
Outputs (what you get)
- Dataset: Dataset items typically include fields like:
startUrl,finalUrl,statusCode,redirected,cookieName,secure,httpOnly,sameSite,domain,path. - Key-value store:
REPORT,SUMMARY
Tips (trust + predictable results)
- Start with 1–3 URLs to validate behavior, then scale up.
- If a target blocks requests, enable Proxy and/or slow down concurrency in Input.
- Use the
SUMMARY/REPORTkeys (when present) for automation pipelines and monitoring.
Related actors
- broken-link-checker (https://apify.com/scrappy_garden/broken-link-checker)
- canonical-url-checker (https://apify.com/scrappy_garden/canonical-url-checker)
- meta-tag-analyzer (https://apify.com/scrappy_garden/meta-tag-analyzer)
- security-headers-checker (https://apify.com/scrappy_garden/security-headers-checker)
Search keywords
cookie security flags checker, cookie security flags checker - audit secure/httponly/samesite on set-cookie, website audit, seo