HAR Traffic Analysis Tools
Free HAR analysis tools: detect auth drift, token placement issues, CORS misconfiguration, undocumented endpoints, and error leakage from browser traffic. By Graph Tools.
- Traffic Policy Analyzer — Upload a HAR file and evaluate captured API traffic against policies for auth presence, token placement, CORS, and error leakage
- Authentication Drift Detector — Detect endpoints accessed both with and without Authorization headers in HAR captures, flagging inconsistent authentication patterns
- Token Placement Guardian — Find tokens passed via query strings, cookies, or request bodies in HAR captures and flag risky placement patterns
- CORS Wildcard Exposure Detector — Detect wildcard origins, reflect-origin, and credentials-with-wildcard CORS patterns in HAR response headers
- Mixed Content Traffic Detector — Detect HTTP resources and insecure redirects in HAR sessions indicating mixed-content or transport downgrade risk
- HTTP Method Exposure Analyzer — Summarize PUT, PATCH, DELETE usage in HAR captures and flag endpoints callable from browser sessions without proper controls
- Deprecated Endpoint Usage Detector — Detect calls to older API versions like /v1 in HAR captures, grouped by endpoint with frequency and migration recommendations
- Undocumented Endpoint Finder — Cross-reference HAR traffic against an uploaded OpenAPI spec to identify undocumented paths and shadow API endpoints
- Traffic Error Leakage Detector — Scan HAR response bodies for stack traces and internal error patterns grouped by endpoint and status code
- Auth Mechanism Profiler — Infer authentication types (Bearer, Basic, Cookies, API keys) from HAR traffic and flag mixed or inconsistent authentication usage