Checks

SameSite=None without Partitioned

A cookie is SameSite=None and Secure, but it is not Partitioned.

Why it matters

Unpartitioned cross-site cookies are what third-party tracking and some login flows rely on. Browsers keep restricting them.

What to do

Add Partitioned (CHIPS) for a third-party cookie, or stop sending it cross-site.

Reference

Cookie attributes such as Secure, HttpOnly, and SameSite protect session tokens in browsers.

OWASP Session Management Cheat Sheet