Cookie Security Flags Checker avatar
Cookie Security Flags Checker

Pricing

Pay per usage

Go to Apify Store
Cookie Security Flags Checker

Cookie Security Flags Checker

Fetch URLs and analyze Set-Cookie response headers for security attributes: Secure, HttpOnly, SameSite, plus __Host- / __Secure- prefix rules. Produces per-cookie results with warnings/errors and writes SUMMARY + REPORT for quick auditing.

Pricing

Pay per usage

Rating

0.0

(0)

Developer

Bikram Adhikari

Bikram Adhikari

Maintained by Community

Actor stats

0

Bookmarked

2

Total users

1

Monthly active users

11 hours ago

Last modified

Categories

Share

Audit Set-Cookie response headers for common security attributes:

  • Secure
  • HttpOnly
  • SameSite (Lax / Strict / None)
  • Prefix rules for __Host- and __Secure-

The Actor produces per-cookie dataset items with warnings/errors, and writes SUMMARY + REPORT into the default key-value store.

Output

Each dataset item represents either:

  • One cookie (when at least one Set-Cookie header exists), or
  • A single “no cookies” record (when none exist)

Fields include cookieName, secure, httpOnly, sameSite, domain, path, prefix, securityScore, and issues.

Input

  • Start URLs: one or more URLs to request.
  • Follow redirects: follow redirects to final URL before analyzing.
  • Proxy: optional Apify proxy.

Run locally

$apify run

Notes

  • Cookie values are not stored (only valueLength) to reduce risk of capturing sensitive data.
  • This Actor checks cookie attribute presence; it does not validate application logic.

Quick start

Store page: https://apify.com/scrappy_garden/cookie-security-flags-checker

Paste this into Input and click Run:

{
"startUrls": [
{
"url": "https://example.com/"
}
],
"proxyConfiguration": {
"useApifyProxy": false
}
}

Outputs (what you get)

  • Dataset: Dataset items typically include fields like: startUrl, finalUrl, statusCode, redirected, cookieName, secure, httpOnly, sameSite, domain, path.
  • Key-value store: REPORT, SUMMARY

Tips (trust + predictable results)

  • Start with 1–3 URLs to validate behavior, then scale up.
  • If a target blocks requests, enable Proxy and/or slow down concurrency in Input.
  • Use the SUMMARY / REPORT keys (when present) for automation pipelines and monitoring.

Search keywords

cookie security flags checker, cookie security flags checker - audit secure/httponly/samesite on set-cookie, website audit, seo