macOS · HTTP(S) debugging

A bird's-eye view of your network.

A macOS app for inspecting and debugging HTTP(S) traffic. It captures with a Network Extension, so your apps need no proxy settings.

Puffin Proxy
Puffin Proxy's main window. The sidebar groups requests by app, the table lists requests to example hosts with their status, size and duration, and the inspector shows a gzip-compressed JSON response decoded into a tree.
Why Puffin

Built to stay out of your way

No proxy settings

A Network Extension catches traffic at the system level. Your apps need no proxy configuration.

You pick the apps

Capture only the apps you choose. Everything else keeps its normal network path, untouched.

Fails open

If Puffin quits or crashes, traffic goes direct. It should never take your network down with it.

Stays on your Mac

No telemetry. Your certificate key is unique to your install and never leaves the machine.

How it works

From your app to your screen

  1. Your appsOutbound connections from the apps you chose, and from iOS Simulator.
  2. Network ExtensionDecides which connections to claim and hands them to the app.
  3. Puffin engineDecrypts listed hosts, parses HTTP/1.1, HTTP/2 and WebSocket, then forwards upstream.
  4. InspectorEvery request lands in the traffic table, ready to inspect and export.
What you get

Everything you need to see what your app sends

See inside HTTPS

Puffin makes its own certificate authority on your Mac and decrypts only the hosts you list.

HTTP/1.1, HTTP/2, WebSocket

Each HTTP/2 stream is its own transaction. WebSocket messages are assembled and listed with direction and size.

A table that keeps up

A native table built for 100,000+ rows, with a sidebar by app and host, and filters.

A proper inspector

Headers, query, cookies, body, raw, timing and TLS, with JSON, XML, form, image and hex viewers.

Take it with you

Save and reopen sessions, redact secrets, import and export HAR, and copy any request as cURL or code.

Change it on the way

Map Local, Map Remote, Block and Rewrite rules, and breakpoints to pause and edit a request or response.

Find the one that broke

Filter on sizes, timings, headers and bodies, compare two requests side by side, and see a summary per host.

Send it again

Replay a request, edit it first, or build one in the Composer and repeat it as many times as you need.

iOS Simulator

Simulator traffic is labelled by device, and Puffin can install its certificate into booted simulators.

See everything in the product tour →

Pay once.

$20 one time

One-time payment, in US dollars. Sales tax or VAT is added at checkout where it applies.

Pricing details

Rules, breakpoints and replay are in

Rewrite traffic, pause and edit it, and send it again. The product tour lists exactly what the app does today.