Documentation
How Harpoon works
Short, honest guides to every feature — what it does, what it costs, and what it will never do with your data. All pages are public; link them freely.
Get started
- Getting startedGet a ranked performance report from a real page load: export a capture, drop it in — no account needed.
- Reading a reportWhat the score, grades, findings, severities, and the request waterfall actually mean.
- The AI reportWhat the AI adds on top of the engine — and exactly what the model does and does not see.
Track & automate
- Comparing runsDiff a before/after capture: verdicts, key changes, per-metric deltas, and permalinks.
- Projects & trendsGroup runs of the same page into a timeline, watch five key metrics, and alert on regressions.
- Capturing pages (incl. behind a login)Capture any URL in a real browser, record authenticated flows, and how the credential vault protects secrets.
- Schedules (recurring scans)Re-capture and re-analyze a saved flow on a schedule, with quotas and overlap protection.
Fix & share
- Fixes & source controlConnect GitHub or GitLab and analyse your repo read-only — 1–3 concrete fix recommendations, no writes to your repo.
- Issue tracker (Jira & Linear)Connect Jira or Linear and file a report's recommendations as real issues — or take the payloads without connecting anything.
- Sharing & exportPublic report links (opt-in, revocable) and PDF/HTML/Markdown/CSV exports.
- CLI & CI checksRun the engine locally with har-analyze and post performance diffs on pull requests.
- The HTTP APIDrive Harpoon from your own code: mint a token, upload a capture, poll the job, read the findings — plus the published OpenAPI spec.
- MCP server (for coding agents)Let Claude Code or any MCP client measure the page it is editing — including your localhost dev server — with the engine running locally.
Account & trust
- Plans & billingWhat each plan includes, how the trial works, and what happens at a plan limit.
- Team & workspaceInvite teammates, manage members and roles, seats per plan, and account security.
- Single sign-onPoint the workspace at your company's OIDC identity provider, verify the domain, and let your team in.
- Security & your dataWhat Harpoon stores, what the AI model ever sees, and how secrets are protected.
Need a hand?
If a guide doesn't answer it, we do — usually within a day.