HAR Network Analyzer
Explore a browser network capture with a timing waterfall, searchable request table, domain breakdown and focused request details. Nothing is replayed or fetched.
HAR captures can contain private URLs, cookies, tokens and bodies. Use a sanitized capture or the demo on this ad-supported page. Processing is local, but third-party page scripts can technically access input. Minimized exports retain hostnames and paths; review them before sharing.
Paste or inspect source HAR JSON
Open a capture or try the demo.
Default view masks query values and credential-like headers and hides bodies. Text is never rendered as HTML. DNS is blue, connect purple, wait amber and receive green; blocked and send are grey.
Selected request details
Using HAR Network Analyzer
Inspect a local HAR capture with request filters, timing waterfalls, status and domain summaries, request details, CSV exports and a minimized redacted report.
- Open a UTF-8 HAR file or paste a capture. Use the demo first if you are new to HAR.
- Filter requests by URL, domain, status, method or resource type; sort and inspect a waterfall row.
- Review timing, headers and bodies as plain text. Export the filtered CSV or review a minimized report before sharing.
Example
Try the included demonstration. Filter requests by URL, domain, status, method or resource type; sort and inspect a waterfall row.
Questions & answers
Where do I get a HAR file?
Browser developer tools can export a network capture as HAR. Chrome’s sanitized export omits certain sensitive headers, but captures can still contain sensitive URLs, parameters and response content. Review/redact before using this ad-supported page.
Are requests replayed?
No. The analyzer does not fetch URLs, replay requests or render response HTML. It only inspects the provided capture in the browser. No automatic saving is used.
What do timing numbers mean?
HAR timing phases are milliseconds. -1 or missing values are treated as unavailable, not zero. SSL is part of connect time in HAR and is not added a second time in the waterfall.
What does the redacted report keep?
It builds a new minimal HAR-like report containing timing, method, status, MIME and sizes. It strips credentials, query values, fragments, cookies, headers, bodies, IP addresses and vendor extensions. URL paths and hostnames remain and may be sensitive; review them before sharing. It is not a faithful full capture.
What are transferred and body bytes?
Chrome’s _transferSize is used when present. Otherwise response headersSize plus bodySize are used if both are known. Decoded content.size is reported separately. Unknown sizes remain unknown; totals include known values only.
What limits apply?
Use UTF-8 input up to 6 MiB and 6,000,000 characters, with at most 5,000 entries. The visible table is paginated at 50 requests. The tool checks necessary fields but does not certify full HAR schema conformance.
Help improve this tool
Report a problem or suggest an improvement
Describe the issue without pasting private tool input. Feedback goes to our admin inbox.
