CORS, CSP, cookies and web hardening checks. 4 free tools, no signup required.
Test cross-origin resource sharing policy.
Parse and grade a site's CSP.
Audit cookie flags for Secure, HttpOnly and SameSite.
Validate robots.txt, sitemap and security.txt.