Checks cookies for Secure, HttpOnly, and SameSite attributes.
This check looks at all the cookies your website sets and verifies they have proper security attributes. It checks for the 'Secure' flag (ensures the cookie is only sent over encrypted HTTPS connections), the 'HttpOnly' flag (prevents JavaScript from accessing the cookie, protecting it from theft), and the 'SameSite' attribute (prevents the cookie from being sent in cross-site requests, protecting against certain types of attacks).
Cookies often store sensitive information like login sessions and user preferences. Without proper security attributes, these cookies can be intercepted or stolen by attackers, potentially allowing them to hijack user accounts or track users without consent. Secure cookies are also important for compliance with privacy regulations like GDPR and CCPA.
Insecure cookies are a privacy and security concern that can lead to session hijacking, unauthorized account access, and potential data breaches. While not a direct SEO ranking factor, security issues can trigger browser warnings and erode user trust in your website — driving visitors away.
Run a free audit to see how your site performs on Cookie Security Audit and 159 other checks.
Start Free AuditVerifies the validity and configuration of the SSL certificate.
Checks if the site is secured with a valid SSL certificate.
Ensures that HTTP traffic is automatically redirected to HTTPS.
Checks for insecure (HTTP) resources on a secure (HTTPS) page.