Decrypt HTTPS and HTTP/2
A one-click root CA turn encrypted traffic into readable exchanges. HTTP/2 keeps its multiplexing, and CONNECT tunnels are relayed intact.
HTTP/HTTPS debugging proxy
See every request.
Change any response.
NovaWire is a fast, native debugging proxy for the traffic your apps really send. Intercept HTTPS and HTTP/2, read decoded bodies, rewrite requests and responses, replay calls, and turn a capture into an OpenAPI contract — all from one window.
- Windows 10/11 · x64
- Free for personal use
- No telemetry
LIVE CAPTURE The same window in both themes — use the switch above.
Speaks
- HTTP/1.1
- HTTP/2
- HTTPS MITM
- WebSocket
- SSE
- GraphQL
- OpenAPI 3.0.3
- HAR 1.2
- gzip · brotli
- JWT decode
- Mobile / LAN
One window, the whole loop
Everything between the click and the bug.
NovaWire is not a viewer bolted onto a proxy. Capture, inspection, rewriting, composition and documentation share one session model — so a request you find is a request you can change, replay and describe.
All screenshots are taken from the real window
WebSocket and SSE
Frames in both directions, Server-Sent Events parsed as they arrive. Each opens in the same body viewer as an HTTP response.
Bodies that read like data
JSON tree, XML, HTML, rendered Page, Image, Hex, and Pretty for minified JavaScript and CSS. Compressed bodies are decoded for reading.
A filter language, not a search box
method:post status:4xx host:*.example.com path:/regex/ size:>1mb duration:>1s
process:node.exe body:yes. Use presets, or click a chip to filter by the
selected row.
Know which process is talking
Proxied requests are attributed to the executable and PID behind them —
node.exe, brave.exe, a Windows service — so a mystery
call has an owner.
Rewrite traffic on the fly
Mock a response, set or remove a header, rewrite a path, drop a request, add latency, or map remote and local. Rules, breakpoints and auto-responders apply to the next request — no restart.
Compose, replay, collect
A full API client beside the proxy: collections, variables and environments, OpenAPI and GraphQL documents, and one-click replay from any captured request.
A contract from the capture
Infer an OpenAPI 3.0.3 document from what actually crossed the wire: paths, path variables, query and header parameters, and request and response schemas.
Take it with you
Export any exchange as cURL (POSIX or cmd), PowerShell, fetch, raw HTTP, HAR 1.2 or a plain URL. Copy it to the clipboard or save it as a file.
Capture
Every protocol your app actually speaks.
The engine is a Rust MITM proxy, not a browser extension and not a simulated tap. It sees the bytes that left the socket — HTTP/1.1, HTTP/2, WebSocket frames and SSE events — and files each exchange with the process that opened it.
- HTTP/2 through the same engine, with concurrent streams captured as they complete.
- WebSocket frames in both directions; SSE events parsed incrementally.
- A bounded 32-512 MiB body store, with truncation flagged.
- One portable
.nwcaparchive — bodies and frames read back identically.
Find
The one request that broke, in one line.
A capture with thousands of lines isn't a list anymore — it's just a giant pile you have to dig through. NovaWire gives you a real filter language, presets for the questions you ask every day, and the process name behind every socket.
- Filter by method, status class, host pattern, path regex, size, duration, body, rules and process.
- Presets for errors, slow, large, with body, modified, replied and WebSocket.
- Chips that take their value from the selected row — one click to narrow the list.
- Column order, visibility and width are all customizable.
Inspect
Read the body the way it was meant to be read.
The inspector opens on the most specific reading of the bytes it has: a JSON tree, a laid-out stylesheet, a rendered page, an image. It tells you what it did to the body, and what it could not show.
- JSON tree, XML, HTML, rendered Page, Image, Hex, Raw and Pretty for JS and CSS.
- gzip on the wire, decoded in the pane: 22.3 KB in, 83.2 KB shown.
- Query parameters parsed into rows, with a count on its own header.
- Every token header gets a Decode button — Bearer JWTs, base64 cookies, opaque tokens.
Change
Change the exchange while it is moving.
Debugging is not only reading. NovaWire can rewrite what goes out, stop what comes back, and answer a request before it ever reaches the server — all from the same window, without restarting capture.
- Rules for headers, paths, mocks, drops, delays, map remote and map local.
- Breakpoints that pause a request or response; edit, continue, or abort with a 502.
- An unanswered pause continues after its deadline, so a forgotten breakpoint is a slow request — not a hung app.
- Auto-responders answer from a canned reply without contacting the server.
TIP
Rules and breakpoints swap in behind a read lock: an edit applies to the next request.
Compose
A client on one side, the capture on the other.
NovaWire is also an API client. Build a request by hand, keep it in a collection, load an OpenAPI or GraphQL document, or start from any request you just captured. The response lands in the same inspector.
- Collections with saved requests, variables and secrets.
- Replay strips transport headers — the tool sets Host and Content-Length from the URL and body.
- Timeouts that actually fire, and a diagnosis when an
https://URL meets a plain-HTTP port. - Request and response bodies in the same viewer as the proxy, with the same 128 KiB display cap.
Describe
Turn a capture into a contract.
Contract reads the traffic you already have and writes down what it proves: paths, path variables, query and header parameters, request and response schemas, and which fields every observation carried.
- This is an experimental feature.
- OpenAPI 3.0.3 inferred from real observations, not from a hand-written spec.
- Pick operations in and out, rename path variables, name operations, add descriptions.
- A path ending in a token is left for you to name instead of being guessed at.
- Test an operation with the values the capture used; save YAML or copy the spec.
Outside the desktop
Debug a phone. Or the machine next to it.
Bind the proxy to every interface, then point a phone, tablet or another computer at the address NovaWire shows. The certificate steps for iOS and Android are in the panel, because installing a CA and trusting it are not the same thing.
- Loopback by default; LAN capture only when you switch it on.
- One address per adapter, with the exact port to type into the device's proxy settings.
- Apps that pin certificates still refuse to be intercepted — and those failed sessions are shown honestly.
- WebSocket and SSE traffic from a device lands in the same session list.
Performance
A Rust engine, not a browser inside a browser.
The MITM engine is Rust. There is no Electron runtime between you and the socket — and the numbers are from the release build, measured over loopback against a direct baseline.
19,689
requests per second through the proxy
0.39ms
added latency at p50 (0.41 ms at p95)
32-512MB
bounded body store, oldest evicted first
100k+
sessions captured with flat resident memory
47
rows in the DOM at 2,000 or 5,000 sessions
9.7MB
MSI installer, with a signed update feed
Thoroughly tested across every single screen and feature, this software ensures everything works reliably and updates are securely protected against any tampering.
Appearance
Light, dark, or automatic.
The app starts in dark mode, but you can switch to light mode anytime—both looks come built-in. It remembers your choice, along with your window size and how you arranged your columns, so everything stays just how you left it.
Compare
The right proxy depends on the job.
Charles, Fiddler Everywhere, Proxyman, mitmproxy and HTTP Toolkit all show you HTTP traffic. The differences are platform, price, and how much of the debugging loop lives in one window. Here is a side-by-side look at what each tool says it can do, checked in October 2026 — including where another tool is the better choice.
Vendor documentation, not a benchmark
| Capability | NovaWire Windows · Rust engine | Charles Proxy Java · cross-platform | Fiddler Everywhere Telerik · cross-platform | Proxyman native · cross-platform | mitmproxy open source · CLI/web | HTTP Toolkit open source core |
|---|---|---|---|---|---|---|
| Runs on | Windows 10/11 · x64 macOS and Linux planned for the near term | Windows · macOS · Linux | Windows · macOS · Linux | Windows · macOS · Linux | Windows · macOS · Linux | Windows · macOS · Linux |
| License | Free for personal use; $9.99 one-time commercial per seat offer price, $19.99 regular | $50 one-time per seat for v5; 30-day trial | Lite from $7, Pro from $13 per user/month (annual); free trial | From $89 one-time per seat; one year of updates | Free and open source | Free Hobbyist tier; paid Pro |
| Interface | Native Windows app | Desktop app (Java) | Desktop app | Native desktop app | Terminal UI + web UI | Desktop app |
| HTTPS interception | Yes | Yes | Yes | Yes | Yes | Yes |
| WebSocket + SSE | Both | WebSocket | Both | Both | WebSocket | WebSocket |
| Rewrite without code | Yes | Yes | Yes | Yes | Partial | Partial |
| Breakpoints | Yes | Yes | Yes | Yes | Yes | Yes |
| API composer | Yes | Yes | Yes | Yes | Replay only | Yes |
| Scripting | No | No | C# scripts | JavaScript | Python addons | No built-in |
| Local process | Yes | Yes | Yes | By app | No | Client icon |
| OpenAPI inferred from traffic | Yes — 3.0.3 | No | No | No | No | No — imports specs |
Scroll the table to compare every tool
“Both” means a documented WebSocket frame view plus a dedicated, parsed SSE event view.
The short version
NovaWire is the only tool here that documents inferring an OpenAPI 3.0.3 document from captured traffic, and today it runs only on Windows — macOS and Linux versions are planned for the near term. It also has no scripting or plugin ecosystem. If Python automation, a macOS-first workflow or a team subscription with shared snapshots is a hard requirement today, one of the other five is the better buy. If you are on Windows and want capture, rewriting, replay and a contract in one window for a one-time price, NovaWire is built for exactly that.
NovaWire
Windows, one window, capture to contract.
Pick it when capture, rules, breakpoints, replay and an inferred OpenAPI document should share one session model — without a subscription or an account.
Charles Proxy
One seat across every desktop OS.
The veteran option, with bandwidth throttling, rewrite tools and a Client Process tool. The $50 license covers Charles 5, and the trial runs for 30 days.
Fiddler Everywhere
A .NET team already inside Telerik.
C# scripting, saved rules, gRPC and SSE decoding, and shared snapshots. Budget for a per-user subscription, and note that traffic-manipulation rules start at Pro. Fiddler Classic is still free for non-commercial Windows use, but it is in maintenance mode.
Proxyman
macOS and iOS work with a native feel.
A polished native app with JavaScript scripting, an SSE tab, mobile companions and one-time pricing. Windows and Linux builds exist, but Apple platforms remain its centre.
mitmproxy
Automation, CI and Python teams.
Free, open source and scriptable, with a terminal UI and a browser UI. There is no account and no general-purpose composer — it is a proxy engine first.
HTTP Toolkit
One-click interception of a client.
An open-source core with a free Hobbyist tier and paid Pro rules. Strong at attaching to a browser, Android app or container; less of a one-window capture-to-contract workflow.
Licensing
Free for personal use
NovaWire is one binary. There are no feature gates, no account and no telemetry. Using it at work, for an employer or for a client requires a license file; everything else is the same product.
Personal
Free, with every feature.
For your own projects, learning, open source and side quests. Capture, rules, breakpoints, the composer, Contract and export all work exactly the same.
- No account, no sign-up, no usage telemetry.
- Capture and inspection are never feature-gated.
- Windows 10/11 today
Freefor personal use
Commercial
A license file, verified offline.
Install one .nwlic file from Settings → License. It is verified
offline, names the licensee, organisation, seats and expiry.
- Reading the license is offline — nothing phones home.
- Commercial use at work, for an employer or a client needs one.
- One-time, perpetual, per seat.
- Support the ongoing development of NovaWire.
$9.99per seat · one-time, perpetual
Temporary offer
Regular price $19.99 per seat
Questions about seats, organisations or enterprise terms? Talk to us.
NovaWire for Windows
Debug your next request.
A fast, native proxy for the traffic you cannot see — and a clear answer about what went over the wire.