What HAR Desk does
Open a HAR file, see what failed and what was slow, and sanitize it with a policy you can read before you send it to support.
Support teams ask for a HAR file because it shows what a browser really sent and received. The same file usually holds session cookies, bearer tokens, form passwords and customer data, so people hesitate before attaching it. HAR Desk reads the file in your browser, shows you what is in it, and helps you reduce what you share.
The inspector lists every request with filters for failures, slow calls and third-party hosts, a timing waterfall, and the headers, cookies, query and bodies of each one. The sanitizer works from a policy you can read: header names, cookie values, query and form parameters, JSON fields by path, token and card-like patterns, ids in URLs and your own rules. Replacements are stable placeholders, so the same secret has the same number throughout without being reversible, and you see every changed field before you download.
HAR Desk is a reduction aid, not a guarantee. It lists what it scanned and what it did not, flags values that still look like secrets, and never says a file is safe to share, because it cannot know what is sensitive in your data. Free covers one file at a time up to 50 MB. Pro is $29 once: saved policies, batch sanitizing into a zip, a detailed two-file comparison, more own rules and larger files.
Popular uses
Each opens HAR Desk already set up for that job, with steps and answers for that case.
Free vs Pro
| Feature | Free $0 · no account |
Pro |
|---|---|---|
| Reads HAR 1.2 files up to 50 MB in your browser: drop, choose or paste. Missing fields, base64 bodies, several pages and browser-specific fields are handled | Included | Included |
| Inspector: request table with filters (status, method, type, text, failed, slow, third party), request detail with headers, cookies, query, bodies and timings, a waterfall and a summary | Included | Included |
| Sanitizer with a visible policy: auth headers, cookies, query and form parameters, JSON body fields, token, email, card-like number, long-secret and IP patterns, optional id-like path segments | Included | Included |
| Three of your own rules (header, cookie, parameter, JSON path or regex) and a review of every changed field | Included | Included |
| A limitations report listing what was scanned and what was not, and a check for values that still look like secrets | Included | Included |
| Download the sanitized .har and a Markdown support pack, one file at a time. Compare two files: the counts of added, removed and changed requests | Included | Included |
| Saved policies and presets, kept in this browser | — | Pro |
| Batch: sanitize several HAR files into one .zip with one shared policy and one shared numbering | — | Pro |
| Compare two HARs in detail: every added, removed and changed request with status, size and time differences, plus a Markdown export | — | Pro |
| More than three own rules (up to 200) | — | Pro |
| Files up to 250 MB | — | Pro |
Pro is $29, paid once. Checkout and the licence key are handled by Dodo Payments (merchant of record). By buying you agree to the Terms and Privacy Policy.
Questions
Is HAR Desk free?
Yes, with no account and no install. The free plan includes: Reads HAR 1.2 files up to 50 MB in your browser: drop, choose or paste. Missing fields, base64 bodies, several pages and browser-specific fields are handled; Inspector: request table with filters (status, method, type, text, failed, slow, third party), request detail with headers, cookies, query, bodies and timings, a waterfall and a summary; Sanitizer with a visible policy: auth headers, cookies, query and form parameters, JSON body fields, token, email, card-like number, long-secret and IP patterns, optional id-like path segments; Three of your own rules (header, cookie, parameter, JSON path or regex) and a review of every changed field; and 2 more. Pro ($29, paid once) adds: Saved policies and presets, kept in this browser; Batch: sanitize several HAR files into one .zip with one shared policy and one shared numbering; Compare two HARs in detail: every added, removed and changed request with status, size and time differences, plus a Markdown export; More than three own rules (up to 200); and 1 more.
Does HAR Desk upload my data?
No. The HAR is processed in your browser and never uploaded to us, and we do not store your data on our servers. Saved policies stay in this browser's local storage. We only measure which buttons are used, never file content; the Pro licence check is the only other request to us. See the Privacy Policy for retention and deletion.
Do I need to install anything?
No. Open the page and start working. It works on desktop and mobile browsers.
How does the Pro licence work?
You pay once and receive a licence key by email from Dodo Payments (our merchant of record). Paste it under "Have a key?" inside the tool. One key works on up to 3 browsers; you can release a browser at any time to use the key elsewhere.
Is a sanitized HAR safe to share?
Not automatically. The sanitizer removes what its rules recognise. It cannot know what is sensitive in your file, so secrets with no name or shape it knows, names, internal hostnames and free text can remain. Read the changed fields and the limitations, and check the file before you send it.
Does my HAR leave my computer?
No. It is parsed and sanitized in your browser tab. We only see which buttons are used, never file content, and Pro users' licence checks contact our licence service.
Will the sanitized file open in Chrome DevTools?
The structure of the file is kept, with the same fields and only values changed, and the tool warns if the output has more HAR 1.2 structure issues than the input. Import it in DevTools to confirm for your own file.
What is replaced with a number?
Each secret becomes a placeholder like [REDACTED:header:authorization_3]. The same value gets the same number everywhere, so you can see a session was reused. The number is a counter, not a hash of the value.
