$megatools --har-sanitizer --client-side

HAR File Sanitizer & Credential Stripper

Scrub cookies, bearer tokens, API keys, passwords, and sensitive headers from HTTP Archive (.har) logs 100% client-side.

🛡️

Drag & Drop HTTP Archive (.har) file here

Zero server uploads. Scrub cookies, tokens, passwords, and sensitive headers locally.

⚙️ Sanitization Strategy & Presets

Auth & Bearer Headers

Authorization, X-Api-Key, Tokens

Cookie & Session Data

Cookie, Set-Cookie & cookie arrays

Query String Credentials

?token=, ?key=, ?secret=, ?code=

Deep JSON Body Scrub

Passwords, secrets, cards, JWTs

URL Token Masking

Scrub tokens from raw request.url

Strip Binary / Base64 Media

Removes bloated images, fonts, audio

Strip All Response Bodies

Preserves headers, purges all responses

Mask IP Addresses

serverIPAddress & clientIPAddress

Replacement Placeholder:

Add Custom Sensitive Header or Key:

$ cat tips.txt

HAR AST & Regex Redactor

How to Use

1Upload, drop, or load sample .har file exported from browser DevTools
2Configure sanitization options (auth headers, cookies, query tokens, JSON bodies, IP masking)
3Review interactive security audit log showing all detected leaks and redactions
4Download clean sanitized .har file or open directly in HAR Waterfall Viewer

Stats

Total Entries:0

Secrets Redacted:0

Original Size:0 B

Sanitized Size:0 B

Client Privacy:100% In-Browser

Tips

•Never share un-sanitized .har files with third parties as they often contain active session cookies and authorization tokens
•Use Ultra-Compact preset to purge heavy response bodies while preserving network requests and headers
•100% client-side privacy: all processing happens in browser memory with zero server uploads

Example

Input

network-session.har with Bearer tokens, cookies, and passwords in JSON body

Output

Sanitized .har with all secrets replaced by [REDACTED] and binary assets purged