/tools/har-viewer
HAR Viewer & Sanitizer
Analyze network request timing and likely credential exposure without loading the complete HTTP archive into memory.
1. Source
Choose one UTF-8 HAR file, or paste a small HTTP archive up to 10 MB.
2. Search and filters
All entriesEvidence filters
3. Requests
4. Request details
Findings
No sampled signals5. Filtered and sanitized HAR export
Matching entries remain in source order. Header, cookie, query and form paths are redacted only in the new output you explicitly create.
No redaction categories are selected automatically. Body scanning follows the explicit Findings setting.
/network-forensics
Understand a network trace before sharing it
Request and response evidence
Inspect methods, URLs, status, MIME type, size, headers, cookies, query parameters and form metadata per entry.
Timing with honest unknowns
Blocked, DNS, connection, TLS, send, wait and receive timing appears as a compact waterfall. Negative and unavailable values stay explicitly unknown.
Bodies remain guarded
Textual request and response bodies are not scanned unless you opt in. Finding summaries mask source-derived values.
Valid filtered archives
The streaming exporter preserves the HAR envelope, keeps matching entries in original order and applies path-aware structured redaction.
/faq
HAR viewer questions
Does the HAR viewer inspect response bodies?
Headers, cookies, URLs, query parameters and form metadata are always inspected. Text bodies are scanned only after explicit opt-in.
Can I create a sanitized HAR?
Yes. Choose filters and redaction categories explicitly, review the export scope and create a new valid HAR without mutating the source.
What can a HAR file expose?
HAR files can contain authorization headers, cookies, query tokens, form values and response data. Treat them as sensitive until reviewed.
Does a negative timing mean zero milliseconds?
No. HAR producers use negative values when timing is unavailable. This viewer labels those values unknown instead of implying zero.