What this tool does
Open a HAR locally, inspect requests, and move into triage views, privacy warnings, safe-share cURL or fetch, and bridge payloads without uploading the HAR to a backend.
Browser-based tool
Load a HAR locally, narrow the blast radius in under a minute, and jump straight into safe-share cURL, fetch, or bridge payloads without sending the HAR to a server.
Open, drop, paste, or sample-load a HAR file to inspect slow requests, failures, redirects, initiator guesses, domains, and privacy risk without backend upload.
If HAR is unfamiliar, you can usually export it from the browser Network panel.
log.entries, entries, or a top-level
entries array. Chrome and Edge extension fields are used when present.
Filters, thresholds, and selection stay shared across Overview, Requests, Waterfall, Initiators, Domains, Redirect chains, and the detail panel.
The main analyzer shell opens after you open a HAR, paste JSON, drop a file, or load the bundled sample.
Review the input shape, safe-share behavior, replay limits, and next steps before you copy snippets or send anyone a HAR-derived export.
Open a HAR locally, inspect requests, and move into triage views, privacy warnings, safe-share cURL or fetch, and bridge payloads without uploading the HAR to a backend.
Open a HAR file, drop one into the page, or paste HAR JSON. Chrome and Edge exports are the common starting point, and partial HAR shapes are still handled with warnings.
Export summary JSON, copy safe-share cURL or fetch, inspect bridge payloads, and use the warnings, fidelity notes, and request detail panels as reusable troubleshooting output.
Safe-share mode is the default. It redacts sensitive header values, query values, payload hints, snippets, bridge payloads, raw previews, and summary exports before anything is copied.
The HAR file stays on this device for the core workflow, but raw mode can still reveal sensitive values on screen if you choose to inspect them.
Partial HAR files, missing timings, header maps, status 0, redirect gaps, and Chrome or Edge extension fields are handled with warnings instead of hard crashes.
Replay output is approximate. Cache state, session cookies, service workers, TLS state, and runtime environment details are not reproduced exactly from HAR alone.
No. Safe-share protects copied snippets and exported summaries. The original HAR remains as loaded until you clear it.
No. It is a practical starting point, not a full browser-state replay.
The analyzer still loads many partial exports and surfaces warnings so you can decide what is still trustworthy.
April 5, 2026