Skip to content
subcloak
Book a test

Personal Cloudfor Cloak Proxy · Mac

Your Cloak Proxy setup on every Mac. End-to-end encrypted.

Rules, mock sets and API workspaces follow you to up to 5 Macs, and captured requests go out as links anyone can open in a browser. Your Macs encrypt everything before it leaves them.

Get Personal Cloud Download Cloak Proxy

$3 a month or $25 a yearFounding offer: $20 for your first year

Get it in Settings › Cloud · 30-day refunds, no questions · billed by Polar

  • 5Macs
  • 5 GBencrypted
  • 30 daysper link
  • 50live links

01 · Sync

Set it up once. Every Mac has it.

You choose what syncs, type by type, in Settings › Cloud › What syncs, and can change it any time. Every Mac you approve gets the same setup.

  • Rules

    Map Local, Map Remote, Rewrite, scripts, breakpoints, Network Conditions, DNS Spoofing and failure scenarios, with their folders and rule sets.

    In the same order

  • Mock sets

    With the responses recorded in them. Recorded credential headers, such as Authorization and Cookie, stay behind.

    Recorded responses too

  • API client workspaces

    Collections, requests, specs, flows, datasets and comments. A workspace from another Mac shows as Not on this Mac.

    Add to This Mac…

  • Environments

    They travel with the workspace. Secret values stay on each Mac unless you tick Secret variable values.

    Secrets: your call

  • Scopes

    The hosts and paths you're allowed to test. Which scope is active stays on each Mac.

    Active scope stays put

  • Saved queries, highlights and filters

    Your saved filter-bar queries, the highlight rules that colour requests, and saved filters.

    status:5xx app:ShopApp

Never leaves this Mac

What's tied to one Mac stays on it.

  • The root certificate and its private key
  • Keychain tokens, .env files and AI keys
  • Proxy and client-certificate passwords
  • File paths, and switches that skip certificate checks
  • Which debugging tools are on, and which scope is active

Up to 5 Macs and 5 GB. A single item over 25 MB doesn't sync, and Sync issues says so.

Everything that syncs
Merged field by field
Rename a rule on one Mac and change its URL on another: you get both. If both change the same field, the other version is kept as a copy and you choose.
Works offline
Changes wait on the Mac and upload when it reconnects. Turning sync off never deletes what's on a Mac.
Git stays Git
A workspace in a Git repository is left to Git. Personal Cloud doesn't sync it.

02 · Share links

Send a request to anyone. Keep the secrets out.

Pick requests, a session or a HAR file and send a link. The recipient opens it read-only in any browser. The key is in the link, so our server stores the requests without being able to read them.

Try the two switches

Share a link

NameCheckout 500 in ShopApp 4.2
Shares3 selected requests
Redact known secretsTokens, cookies, passwords, API keys and card numbers show as REDACTED
Hide all body valuesHides every body, query, path and header value except Content-Type, Accept, Accept-Encoding, Accept-Language, User-Agent, Content-Encoding, Transfer-Encoding, Connection and Date; keeps names and structure
Include request and response bodies

No known secrets found. Redaction covers common formats, not every one: look over the requests before you share, or turn on Hide all body values.Redaction is off: headers and bodies are shared as captured.

Expires24 hours
Views5 views

Require a password

Uploads 3 requests (URLs, headers, bodies and timing), encrypted with a key that only the link carries. It works for 24 hours, until you revoke it in Settings › Cloud.

Share LinksFile › Share Links…

Checkout 500 in ShopApp 4.2Active

2 of 5 views used, 3 left · last opened 12 minutes ago

  • 12 minutes agoGermany
  • 40 minutes agoGermany

Shared requests

Checkout 500 in ShopApp 4.2

  1. POST/v1/checkoutapi.example.com500
  2. GET/v1/cartapi.example.com200
  3. POST/v1/auth/refreshauth.example.com200

POST api.example.com/v1/checkout

  • cURL
  • fetch
  • Python
  • URL
  • Response body

Request headers

Authorization
Bearer eyJhbGciOiJIUzI1NiJ9.eyJzdWIiOiI0MiJ9.k3Jv…REDACTED
Cookie
session=s%3A9xQ2vLm0Pe7…REDACTED
Content-Type
application/json

Request body

{
"cart_id": "c_8812""REDACTED",
"email": "ada@example.com""REDACTED",
"card_number": "4242 4242 4242 4242""REDACTED",
"coupon": "WELCOME10""REDACTED",
"total": 84.50"REDACTED"
}

Response5001.84 s

{
"error": "payment_provider_timeout""REDACTED",
"retry_after": 30"REDACTED"
}

Read-only. Shared from Cloak Proxy and decrypted in this browser: the server stores only encrypted data and never receives the key in the link.

Password, views, expiry
An optional password that never leaves your Mac or their browser. Once to 100 views. From 1 hour to 30 days.
Who opened it
Each open, with when and from which country. Revoke stops the link at once and deletes its data.
Copy as code
Recipients copy any request as cURL, fetch or Python. Redacted values stay REDACTED.
Any source
Selected requests, a whole session, a saved .cloaksession or a .har file, or cloakctl share from a script.

Redaction covers common secret formats, not every one. A second leak check looks again, and the app asks before sharing anything it flags.How share links work

03 · A new Mac

A new Mac, set up in one step.

Approve it from a Mac you already use, restore everything you sync, and tick off the few things that never sync.

  1. 01

    Approve it from a Mac you already use

    Sign in on the new Mac. Your other Mac shows a 6-digit code; if the new one shows the same, approve it. The code proves the request came from the Mac in front of you.

  2. 02

    Restore this Mac in one step

    Choose what comes back and which folder each API workspace goes in. If the Mac already has its own rules, merge them or replace them.

  3. 03

    Finish setting up

    A short checklist covers what never syncs: this Mac's own certificate, the proxy switch, and anything that arrived switched off for you to review.

No other Mac to hand? Your Recovery Kit signs a new Mac in by itself, with no email code.Add another Mac, step by step

04 · Safety

Encrypted on your Mac. Checked by your Macs.

Your Macs encrypt everything before upload, with keys that only your computers and your Recovery Kit hold. Subcloak can't read your data, even if our servers are breached.

Subcloak can see

  • Your email, plan and billing status
  • How many computers you have, and when each syncs
  • Encrypted sizes, padded so they're not exact
  • How many times a share link was opened, and the country of each view

Subcloak can't see

  • Rules, mocks, scripts, workspaces and requests, or their names
  • Share-link contents, titles and passwords
  • Your Recovery Kit and your encryption keys
  • Your root certificate's key, Keychain tokens, .env files and AI keys: they never upload

Encrypted with AES-256-GCM on your Mac. Every change is signed by the Mac that made it, and your Macs check the server's log, so it can't slip in a computer or a key of its own.

How the encryption works Its limits

  • Recovery Kit

    A one-page PDF you keep offline. It brings everything you sync back onto a new Mac, even if you lose every Mac, and signs that Mac in by itself. It never goes to Subcloak.

  • Security code

    Twelve digits in Settings › Cloud › Devices. When they match on all your Macs, your Macs agree on which computers can read your data.

  • Changes wait for your review

    Scripts, Map Local and similar rules and mock sets arrive switched off, and changes to what's captured wait, each naming the Mac it came from. A request changed on another Mac is sent without your credentials until you approve it.

  • A lost or stolen Mac

    Remove it from another Mac. It can't sync again, your account key changes, and any computer it approved goes with it. Deleting your account always waits 72 hours, with a cancel link in your email.

05 · Pricing

$3 a month. Or $25 a year.

One plan, bought inside the app. No free trial: if it isn't for you, get a full refund within 30 days, no questions asked.

Personal Cloud

$25a yearor$3a month

US dollars, plus local tax · 30-day refunds, no questions

Founding offer

$20 for your first year on the yearly plan, for the first 50 yearly subscribers.

  • 5Macs
  • 5 GBencrypted
  • 30 daysper link
  • 50live links

Everything in Cloak Proxy, plus:

  • Sync of rules, mock sets, API workspaces, environments, scopes, saved queries, highlights and filters
  • Restore this Mac and the Finish setting up checklist
  • Share links with redaction, a password, a view limit and an expiry
  • Who opened each link, and Revoke
  • Recovery Kit and Security code
  • Changes from other Macs that wait for your review
  • Priority email support: a reply within 2 business days

How to buy it

  1. 1Download Cloak ProxyFree, for macOS 14 Sonoma or later.
  2. 2Open Settings › CloudSign in with your email and choose yearly or monthly.
  3. 3Pay on Polar's pageThe app moves on by itself when Polar confirms.
Get Personal Cloud

Polar is our merchant of record. Refunds · Terms · Plans and billing

Cloak Proxy

$0forever

The whole app. No account, no trial.

  • Breakpoints, Map Local and every debugging tool
  • Scripting and rewrite rules
  • The API client, with collections and environments
  • MCP server with 154 tools
  • LLM Inspector
  • Capture of apps that skip the proxy
  • Authorization matrix and API contract tests
  • Live sharing on your network, with nothing uploaded

Nothing free moves into a plan. Cloak Proxy is free forever, and Cloud is off until you buy it.

Everything inside

Team Cloud is available, for teams. See Team Cloud

FAQ

Before you subscribe

Something else? Email hello@subcloak.com or book a call.

Is Cloak Proxy still free?

Yes, for life. Every feature outside Personal Cloud works without an account, and nothing that's free today will move into a plan. Personal Cloud is optional and stays off until you buy it in Settings › Cloud. See what's free.

What can Subcloak see?

Your email, your plan, how many computers you have and when they sync, the padded size of what you store, and how often each share link was opened and from which country. Not your rules, mocks, workspaces or requests, not their names, and not your share links' contents or passwords. Subcloak can't read your data, even if our servers are breached. The full list is in Security and privacy.

What if I lose my Macs?

If you still have one Mac, remove the lost one from it. If you've lost every Mac, your Recovery Kit gets everything you sync back on a new one and signs out every other computer. Without the kit and without any of your Macs, your Cloud data can't be recovered, by you or by us. The data on your Macs is never affected. Recovery Kit

How many Macs, and how much storage?

Up to 5 computers and 5 GB of encrypted storage. Share links last up to 30 days and hold up to 100 MB each, with up to 50 active at once.

Can I cancel?

Any time, from Settings › Cloud › Plan or Polar's customer portal. Cloud keeps working until the end of the period you paid for, then is read-only for 30 days: buy again in that time and everything comes back, share links included. After that, your Cloud copy is deleted. Nothing on your Macs changes.

Is there a free trial? What about refunds?

There's no free trial. Instead, every payment, first or renewal, can be refunded in full within 30 days, with no questions asked: email hello@subcloak.com from the address you paid with. Polar, our merchant of record, handles payment, tax and receipts. Refund policy

Does it work on Linux?

Not yet. Personal Cloud needs Cloak Proxy 0.7.4 on a Mac with macOS 14 Sonoma or later. The Linux beta is on 0.5.1, without Cloud.

Is there a team plan?

Yes: Team Cloud, $5 a seat a month ($4 yearly), 2 seats minimum. Start a team in the console. It's a separate plan: a Team seat doesn't include Personal Cloud. See Team Cloud.

Want it used on your app? We test with Cloak Proxy, then a person proves every finding and signs the report.Also from Subcloak: Cloak Watch, free supply-chain checks for your Mac.

Your setup, on every Mac.

Download Cloak Proxy 0.7.4 free, then open Settings › Cloud to get Personal Cloud: $3 a month or $25 a year, with a 30-day refund, no questions asked.

macOS 14 Sonoma or later · Apple silicon and Intel

Download Cloak Proxy

Free for life. Personal Cloud is optional, inside the app.

Free for life · macOS 14 Sonoma or later · Apple silicon and Intel
No sign-up needed. Leave your email only if you'd like release notes; we use it for nothing else. Privacy

Download Cloak Proxy

Free for life. No account, no sign-up.

Free for life · macOS 14 Sonoma or later · Apple silicon and Intel
No sign-up needed. Leave your email only if you'd like release notes; we use it for nothing else. Privacy

Get Personal Cloud

Five steps, about three minutes. You buy it inside the app.

or brew install --cask subcloak/tap/cloak-proxy

Step 1 of 5

Download Cloak Proxy

The app is free for life and never needs an account. Personal Cloud is the optional plan you add to it. Already have Cloak Proxy 0.6.0 or later? Skip to the next step. On an older version, choose Check for Updates… first.

Settings › Cloud in Cloak Proxy: Personal Cloud's price, the founding offer and the Get Personal Cloud button

Step 2 of 5

Open Settings › Cloud

In Cloak Proxy, choose Cloak Proxy › Settings… (⌘,) and click Cloud. Then click Get Personal Cloud…

In 0.6.1 or later, the Free pill in the toolbar opens the same plans, or open them from here:

Open in Cloak Proxy

The Sign in to Personal Cloud sheet: an email field and this computer's name

Step 3 of 5

Sign in with your email

There's no password. We email you a 6-digit code: type it in Cloak Proxy, or click the link in the email to confirm in your browser.

The Buy Personal Cloud sheet: Yearly at $25 a year or Monthly at $3 a month, and a Buy button

Step 4 of 5

Choose a plan and pay

Yearly, $25 or monthly, $3. Checkout opens in your browser with Polar, our merchant of record, and the app moves on by itself once it's paid. No free trial: a refund within 30 days instead, no questions asked.

Founding offer: $20 for your first year on the yearly plan, for the first 50 yearly subscribers.

The Save your Recovery Kit sheet: the key, a QR code, and Save PDF, Print and Copy buttons

Step 5 of 5

Save your Recovery Kit

Your Mac makes your encryption key, so nobody else has it, not even us. Save the Recovery Kit PDF somewhere safe: it's how you get back in if you lose every Mac. Then pick what syncs and add your other Macs.