<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>Subcloak blog</title>
    <link>https://subcloak.com/blog</link>
    <atom:link href="https://subcloak.com/blog/rss.xml" rel="self" type="application/rss+xml" />
    <description>Guides on debugging network traffic, mocking APIs and testing apps, from the team behind Cloak Proxy.</description>
    <language>en</language>
    <lastBuildDate>Tue, 20 Oct 2026 00:00:00 GMT</lastBuildDate>
    <item>
      <title>Find IDOR bugs from traffic you already captured</title>
      <link>https://subcloak.com/blog/find-idor-bugs-from-captured-traffic</link>
      <guid isPermaLink="true">https://subcloak.com/blog/find-idor-bugs-from-captured-traffic</guid>
      <description>Test your own API for IDOR (broken object level authorization) by replaying captured requests as a second user, an admin and no credentials.</description>
      <pubDate>Tue, 20 Oct 2026 00:00:00 GMT</pubDate>
      <category>security</category>
      <category>testing</category>
    </item>
    <item>
      <title>What did my AI agent actually send? Inspecting LLM calls, tokens, cost and prompt-cache misses</title>
      <link>https://subcloak.com/blog/inspect-llm-api-calls-tokens-cost</link>
      <guid isPermaLink="true">https://subcloak.com/blog/inspect-llm-api-calls-tokens-cost</guid>
      <description>Route your agent's OpenAI, Anthropic or Gemini calls through a local proxy to see each prompt, tokens, estimated cost, time to first token and cache misses.</description>
      <pubDate>Tue, 20 Oct 2026 00:00:00 GMT</pubDate>
      <category>ai</category>
      <category>debugging</category>
      <category>https</category>
    </item>
    <item>
      <title>Proxyman vs Charles vs HTTP Toolkit vs mitmproxy vs Cloak Proxy (2026)</title>
      <link>https://subcloak.com/blog/proxyman-vs-charles-vs-http-toolkit-vs-mitmproxy</link>
      <guid isPermaLink="true">https://subcloak.com/blog/proxyman-vs-charles-vs-http-toolkit-vs-mitmproxy</guid>
      <description>Five HTTP debugging proxies compared on price, platforms, mocking, scripting, HTTP/3, MCP and CI, with plain advice on when each one is the right pick.</description>
      <pubDate>Tue, 20 Oct 2026 00:00:00 GMT</pubDate>
      <category>comparison</category>
      <category>debugging</category>
    </item>
    <item>
      <title>Test how your app handles a flaky network</title>
      <link>https://subcloak.com/blog/test-app-flaky-network</link>
      <guid isPermaLink="true">https://subcloak.com/blog/test-app-flaky-network</guid>
      <description>A checklist of network failures to cause on purpose: retries, timeouts, resets, cut-off bodies, slow or stale responses and expired sessions, locally and in CI.</description>
      <pubDate>Tue, 20 Oct 2026 00:00:00 GMT</pubDate>
      <category>testing</category>
      <category>networking</category>
      <category>debugging</category>
    </item>
    <item>
      <title>Mock an API response in the iOS Simulator without changing code</title>
      <link>https://subcloak.com/blog/mock-api-response-ios-simulator</link>
      <guid isPermaLink="true">https://subcloak.com/blog/mock-api-response-ios-simulator</guid>
      <description>Turn a captured request into a mock, edit the JSON, and test 500s, 401s, empty lists, slow responses and single GraphQL operations, then share the mocks with your team.</description>
      <pubDate>Mon, 19 Oct 2026 00:00:00 GMT</pubDate>
      <category>ios</category>
      <category>mocking</category>
      <category>graphql</category>
      <category>testing</category>
    </item>
    <item>
      <title>How to see your iPhone app's network traffic (free, on a Mac)</title>
      <link>https://subcloak.com/blog/see-iphone-app-network-traffic-mac</link>
      <guid isPermaLink="true">https://subcloak.com/blog/see-iphone-app-network-traffic-mac</guid>
      <description>Capture and decrypt HTTPS from the iOS Simulator or a real iPhone with a free Mac proxy: setup, certificate trust, reading requests, and fixes when traffic hides.</description>
      <pubDate>Mon, 19 Oct 2026 00:00:00 GMT</pubDate>
      <category>ios</category>
      <category>https</category>
      <category>debugging</category>
    </item>
  </channel>
</rss>
