Charles Proxy
HTTP/HTTPS debugging proxy — inspect, throttle, and rewrite requests, especially useful for mobile testing.
Pricing
Paid
Type
Manual
// VERDICT
Reach for Charles when you need a proven cross-platform proxy to see and manipulate real HTTP/HTTPS traffic, including from mobile devices. Skip it when you want a free tool, a more modern UI, or an API client for authoring requests.
Best for
Inspecting, recording and rewriting live HTTP/HTTPS traffic between an app and the network - the long-standing cross-platform debugging proxy.
Avoid when
You want a free or modern-feeling tool, or you need to send/author requests rather than observe them.
CI/CD fit
Manual/interactive tool - not a CI fit
Team fit
Mobile QA · Developers debugging APIs · Testers inspecting live traffic
Setup
Maintenance
Learning
Licence
// BEST FOR
- Seeing exactly what requests and responses cross the wire, live
- Debugging HTTPS traffic via SSL proxying after trusting its certificate
- Inspecting traffic from mobile devices on the same network
- Rewriting, mapping or throttling responses to test edge cases
- Recording sessions and exporting them for analysis
- Reproducing network conditions (slow/unstable) to test resilience
// AVOID WHEN
- You want a free tool (Charles is paid)
- You need to author and organise API requests (use a client)
- You want a tool that runs in CI - this is interactive only
- A more modern UI matters (Proxyman/HTTP Toolkit feel newer)
- You only test on a server you control with full log access
- Active security scanning is the goal (use Burp/ZAP)
// QUICK START
Install Charles -> enable SSL proxying -> trust the Charles root certificate
on your device/browser -> route traffic through the proxy and inspect.// ALTERNATIVES TO CONSIDER
| Tool | Choose it when |
|---|---|
| Proxyman | You want a more modern, Mac-first proxy with a freemium tier. |
| Fiddler | You want a Windows-rooted proxy with a free tier. |
| HTTP Toolkit | You want a modern open-core proxy with one-click app interception. |
// FEATURES
- HTTP/HTTPS request and response inspection
- SSL/TLS proxying with installed root cert
- Bandwidth throttling presets (3G, 4G, etc.)
- Breakpoints to pause and edit requests
- Map Local and Map Remote for response substitution
- Native macOS, Windows, and Linux apps
// PROS
- Best-in-class for mobile network debugging
- Friendly UI compared to mitmproxy/Wireshark
- Throttling and breakpoints great for QA scenarios
// CONS
- Paid licence required after trial
- Throttling presets can feel imprecise
- Single-developer maintenance — slower release cadence
// EXAMPLE QA WORKFLOW
Route the app or device's traffic through Charles
Enable SSL proxying and trust its certificate to decrypt HTTPS
Inspect requests and responses live
Use map/rewrite rules to simulate edge-case responses
Throttle the connection to test slow-network behaviour
Record and export the session for analysis
// RELATED QA.CODES RESOURCES
Cheat sheets
Glossary
Interview