About this utility
How to use HAR Waterfall & Privacy Inspector
Inspect an HTTP Archive as a request waterfall and flag cookies, authorization, query secrets, and oversized assets.
What to provide
Paste or drop a .har file. Request and response bodies are never rendered or executed.
- Paste, type, or drag and drop a supported text file into the input area.
- Choose the options that match your intended result.
- Select “Run tool” or press Ctrl/Command + Enter, then copy, download, or move the result back into the first input for another pass.
What the result means
A timing waterfall, domain/status/size summaries, and sensitive-data findings.
Privacy and safety
This utility is loaded as browser code and processes your input only in this tab. OmniCastConverter has no upload endpoint and never stores your content, filenames, tokens, or secrets. Generated markup and code are shown as inert text and are never executed.
Limitations
- HAR timing reflects browser capture semantics and may omit cached, service-worker, HTTP/2, or connection-reuse details.
Try the included example
Select “Load example” at any time to restore this tested sample.
{"log":{"version":"1.2","creator":{"name":"Browser","version":"1"},"entries":[{"startedDateTime":"2026-07-23T10:00:00Z","time":120,"request":{"method":"GET","url":"https://example.com/app.js","headers":[]},"response":{"status":200,"content":{"size":4200},"headers":[]}},{"startedDateTime":"2026-07-23T10:00:00.050Z","time":80,"request":{"method":"GET","url":"https://api.example.com/data?token=secret","headers":[]},"response":{"status":200,"content":{"size":800},"headers":[]}}]}}