Parse Set-Cookie headers into structured JSON, or analyze cookie security flags (Secure, HttpOnly, SameSite, expiry). Everything runs locally in your browser — nothing is uploaded.
Analyze HTTP request and response headers — detect security headers, review formatting, and inspect value structure. Everything runs locally in your browser — nothing is uploaded.
Parse and inspect URL query parameters as structured key-value pairs. Decodes URL-encoded values and displays them in a readable JSON format.
Generate a security.txt file for your website following RFC 9116 standard. Specify contact email, security policy URL, encryption key, and expiry date for vulnerability disclosure.
Convert messy CSV or Excel sheets from clients into clean JSON in one batch. Handles missing values, nested rows, and generates strict JSON schemas for 50+ files at once. Everything runs locally in your browser — nothing is uploaded.
Convert Toon format (→ arrows) back into JSON. Reverse of the JSON → Toon converter for round-trip data transformation.
Name, value, domain, path, expires/max-age, secure flag, HttpOnly flag, SameSite attribute, and other Set-Cookie directives are extracted and displayed.
Yes. The tool analyzes Secure, HttpOnly, SameSite, and domain settings, flagging missing or insecure configurations.
Yes. If a cookie has an Expires attribute in the past, the tool flags it as expired. It also shows max-age countdown for session cookies.
Yes. Paste multiple Set-Cookie headers and the tool parses each one separately, displaying structured data for every cookie.
No. All parsing happens locally in your browser. No cookie data is transmitted to any server.