# Leaked Cookies API

The Leaked Cookies API returns browser cookies stolen from employee devices by infostealer malware, matched to your domain and enriched with device and source context. A leaked session cookie lets an attacker skip the login page entirely - even with a strong password and MFA.

- [Introduction](leaked-cookies-what-is) - coverage, sources, and enrichment.
- [Quickstart](leaked-cookies-quickstart) - your first request in 4 steps.
- [Filters](leaked-cookies-filters) - narrow by `cookie_type`, `browser`, `service_host`, `expiration_status`.
- [Record Data Fields](leaked-cookies-data-fields) - every field inside a record.

> [!NOTE]
> The Leaked Cookies API requires its own permission and credits on your account - contact sales@webz.io for access.