All checks

Cookies

Cookies set on arrival, and how tightly each one is scoped

👑 Unlimited Scans (3/3)
https://

What it is

Cookies are small pieces of data a site asks your browser to store and hand back on later requests. They hold session state, preferences, and very often tracking identifiers.

Why it matters

What a site sets before you have interacted with it says a lot. Session cookies show how logins are managed, and third-party cookies name the analytics and advertising companies involved. The flags on each one, Secure, HttpOnly and SameSite, show how carefully the site handles them.

How this assessment works

Skopeon Labs queries public infrastructure signals and authoritative network protocols directly from external sensor nodes. All evaluations are completely non-invasive and agentless, assessing observable configurations without sending malicious payloads or disrupting service.

Operational Scope & Limitations

This check evaluates public perimeter responses observable at the time of inquiry. Endpoints protected behind third-party reverse proxies or CDNs reflect the edge configuration of the proxy layer.

Key terms

Cookie Security Flags
Secure keeps a cookie off plain HTTP, HttpOnly hides it from scripts, and SameSite stops other sites sending it.

Related checks