Find the problem
Server errors, auth failures, likely CORS blocks, redirect chains, mixed content, slow time to first byte and oversized payloads, each explained in a sentence.
HAR file analyzer
Read the HAR. Redact the secrets.
Drop in a .har file to see the waterfall, the failed and slow requests, and a plain-English list of what probably went wrong. Then download a copy with cookies, tokens and passwords taken out, ready for a support ticket.
- Read in your browser, never uploaded
- Free, no sign-up
- Any HAR 1.2 file
HARscope runs here
Loading…
Read every request
A waterfall with DNS, connect, TLS, wait and download phases, plus headers, cookies, query strings and bodies for any request you click.
Send it safely
Redact cookies, Authorization headers, API keys, JWTs, emails and passwords, review every change, and download a clean HAR.
Before you attach it to a ticket
A HAR holds your session. Send the redacted copy.
Cookies, bearer tokens and API keys in a HAR still work for whoever opens it. The Sanitise tab removes them in your browser, shows you every value it changed, and gives you a clean .redacted.har to attach. What it removes.
Need a HAR first?
Export one in under a minute.
Open DevTools, go to Network, tick Preserve log, reproduce the problem, export. Steps for Chrome, Edge, Firefox and Safari, including which export leaves your cookies out.
Questions
Is my HAR file uploaded anywhere?
No. HARscope reads the file with your browser's own File API and does all the analysis and redaction on your device. There is no upload endpoint on the server, so the file has nowhere to go.
What is a HAR file?
An HTTP Archive: a JSON file your browser writes from its Network panel. It lists every request with its URL, headers, cookies, timings, and often the request and response bodies.
Why should I sanitize a HAR before sending it?
A HAR usually contains your session cookies and access tokens. Anyone holding them can act as you until they expire. Redact them before attaching the file to a ticket or a chat.
Does the redaction catch everything?
It catches the common places secrets live: cookies, auth and API-key headers, sensitive query parameters, JWTs, bearer tokens, well-known API key formats, emails, and password-like fields in JSON and form bodies. It cannot know every app's private field names, so read the list of changes before you send the file.
How big a file can it open?
It depends on your device's memory. Files of tens of megabytes open in a few seconds on a laptop. Very large captures with full response bodies can be slow.
Does it cost anything?
No. HARscope is free and has no account.