Fetch a URL and score every Set-Cookie header for Secure / HttpOnly / SameSite flags. Rates weak → strong per cookie.
Do you accept the TOS?