HAR Analyzer

Import a browser-exported HAR 1.2 file to inspect request timing, HTTP status, security headers, mixed content, and sensitive fields.

Drop a .har file here or choose a file.

Choose a HAR file to start analysis.

#	Method / Status	URL	Waterfall (start offset / duration)	Security Notes	Actions

Request Details

Select a request to view details

Privacy and Analysis Limits

HAR files often contain cookies, authorization, access tokens, request bodies, and personal data. The file is parsed in browser memory only. Reports show sensitive field names but hide values. Generated cURL commands redact common credentials. Filtered exports retain the original selected requests, so review them before sharing.

The waterfall uses request start times and total duration recorded in HAR; DNS, connection, TLS, wait, and receive timings appear in request details. Security checks use only captured response headers; a missing header in HAR does not prove the live service lacks it. Mixed content is inferred when an HTTP request has an HTTPS Referer.