HAR File Analyzer & Security Scanner

Drop a .har file to generate a pixel-accurate network waterfall, identify third-party requests, and detect exposed API keys or tokens. Processing stays completely local.

Loading Tool...

💡Help shape DevUtils.lol

No black-box support tickets. DevUtils.lol is built for you. Report bugs directly to our public repo, or come hang out with other devs in the community.

Frequently Asked Questions

An HTTP Archive (HAR) format tracks all web browser interactions with a site. It logs headers, timings, response bodies, and cookies, making it vital for debugging performance and network issues.

Yes. HAR files often contain sensitive session cookies and API tokens. Our tool runs entirely in your browser using a Web Worker. Your data is never sent to a server, guaranteeing zero-trust security.

The scanner runs high-precision regex patterns against all request headers, response headers, and URLs inside the HAR file, flagging common secrets like Bearer tokens, API keys, and session cookies.

Currently, the tool renders a detailed waterfall chart of timings and sizes, grouped by domain to highlight performance bottlenecks and trackers. Full header inspection is coming soon.

The tool utilizes Web Workers and a virtualized HTML5 canvas to process and render multi-megabyte HAR files without blocking your browser's main thread.

It groups all network requests by domain, calculating their total size and time contribution. It also flags known analytics and advertising trackers to help you optimize your page load.