Cookie Analyzer

Parse Set-Cookie headers. Check HttpOnly, Secure, SameSite. Find security issues.

One cookie per line. Prefix with "Set-Cookie:" or paste raw.

Best: HttpOnly, Secure, SameSite=Strict (or Lax). Avoid SameSite=None without Secure.