Analyse HAR files offline with a single HTML file

If your HAR capture contains internal hostnames, authorisation tokens, cookies or other confidential data, using an offline analysis tool can reduce the risk introduced by third-party scripts and remote processing.

Download and run the offline analyser

1. Download the Mightora offline ZIP.
2. Extract the ZIP archive onto your computer.
3. Double-click har-analyser.html. A modern browser will open the tool.
4. Choose the HAR file you want to inspect. Results appear locally in the browser.
5. Optionally export a sanitised report, reviewing it carefully before sharing.

You may also download the standalone HTML directly. There is no executable installer or privileged permission request.

Does it send data anywhere?

The offline edition embeds its JavaScript, CSS and logo. It doesn't include analytics, CDN requests, background synchronisation, telemetry or fetch calls. Captured HAR URLs are displayed only as text and never replayed. The tool can run with your computer disconnected from the internet.

How to verify that the offline analyser makes no network requests

The offline edition displays a Network Transparency panel and a visible offline-mode label. Its on-screen Resource Timing summary can show resource destinations exposed to the page, but it cannot prove that the whole browser has sent no traffic. Independently inspect communication using Developer Tools:

1. Download the ZIP, extract it and open har-analyser.html directly from disk using a modern browser. Confirm the address begins with file://.
2. Press F12 or Ctrl+Shift+I on Windows/Linux; on macOS use Command+Option+I.
3. Choose Network, select All, enable Preserve log and reload the file.
4. Look for remote script, stylesheet, image, font or fetch requests. The file is self-contained, so none should be needed. The local document itself may appear.
5. Load and analyse a HAR; filter Fetch/XHR and inspect any unexpected traffic. You should not see the analyser uploading the HAR.

For particularly sensitive material, turn off the internet connection before opening the capture. Developer Tools reports a fuller view of page requests than the on-screen summary, but browser extensions and other processes can generate traffic of their own.

What about the browser?

Opening local HTML is supported by modern versions of Chrome, Edge and Firefox. Browser security rules for local files differ slightly. The offline analyser supports processing directly without requiring a local web server or module imports. You can disconnect from the network as an additional precaution before opening a sensitive capture.

Privacy isn't the same as anonymisation

Your original HAR still contains whatever the capturing browser recorded. The report removes sensitive raw fields, but hostnames and some paths may remain recognisable. For highly sensitive incidents, store, delete and share files in accordance with your organisation's security policies.

Is the download safe to inspect?

Yes: the source is available in the public GitHub repository under the MIT licence. The ZIP contains an HTML file and documentation—not a compiled program. You can open the HTML in a text editor and audit the code.

Try it yourself: Open the free private HAR analyser or download the offline ZIP.