Charles

A $50 web debugging proxy whose licence is pinned to a version number instead of a renewal date

Verdict

Charles is the cheapest serious web debugging proxy sold outright, and the terms are set out in four short paragraphs on its own Buy page. Fifty dollars buys one user licence. That licence is valid for the current major version, 5.X, and for every update up to but not including the next major version. There is no renewal date and no annual fee. This documentation review is built from the Charles Buy page, Overview page, Download page and home page news column, all read on November 1, 2026, with no testing of our own. The strong part is the update rule: point releases keep arriving for as long as version 5 lives, which on the published record now stretches from March 2025 to April 2026 and counting. The weak parts are also published. A user licence is written for one computer, no refund window appears on the Buy page because a reseller handles returns, and the price of version 6 is nowhere on the site.

Visit Charles
We have no affiliate relationship with this vendor. Link goes to the official site.

At a glance

What Charles actually is, and what XK72 sells

Charles is a proxy that runs on your own machine and records every request your browser or app sends through it. Nothing about it is hosted.

The vendor's description is plain. Charles is "an HTTP proxy / HTTP monitor / Reverse Proxy that enables a developer to view all of the HTTP and SSL / HTTPS traffic between their machine and the Internet".

What is sold is a user licence, by one developer, through one reseller. The Buy page carries no subscription tier at all.

So the decision is not which plan to pick. It is whether a licence pinned to a major version suits the way you work.

What the fifty dollars actually buys

One number does most of the work here. "1 license - USD $50" sits at the top of the Buy page, read on November 1, 2026.

The pricing table below it prints the volume steps rather than hiding them behind a sales form. One to four user licences cost $50 each.

Five or more cost "USD $40 / license (20% discount)". Ten or more cost "USD $30 / license (40% discount)".

Two organisation-wide options sit beside those. A Site License is USD $400 and covers use "on any computer at one site". A Multi-Site License is USD $700.

For a team of twenty, the site licence is the obvious read: $400 against $600 at the ten-plus per-user rate. That arithmetic is ours, from the vendor's own published rates.

Paddle.com is named as Merchant of Record and adds sales tax where it applies. The same logic that governs most of the stores covered in our notes on what happens after you pay once.

The licence is pinned to a version number, not a date

This is the sentence that decides whether Charles is a good buy, and it is easy to skim past.

The Buy page states that each licence "is valid for the current major version of Charles at the time of purchase (currently 5.X), and remains valid for all updates up to but not including the next major version".

That is a different promise from a subscription and a different promise from twelve months of updates. There is no clock. There is a ceiling.

The published record gives that ceiling some shape. Charles 5 was released on 12 March 2025, and the news column records Charles 5.1 on 21 April 2026.

Two further terms narrow it. A licence gets the next major version free only "if the next major version is released within three months of the license purchase". Otherwise an upgrade costs "40% of the original license purchase price".

What is not published is the price of version 6, or any hint of when it might arrive. We read four pages on November 1, 2026 and found no figure.

Who Charles is best for

The fit follows the licence terms more than the feature list.

• Backend and mobile developers who need to see raw request and response bodies without instrumenting an app
• QA testers who need to repeat a request, edit it, or hold it at a breakpoint to force an error path
• Front-end engineers checking what a third-party script actually sends, and when
• Small teams of five to ten, where the printed volume rate cuts the licence to $40 or $30 a head
• Anyone on Linux, since the Download page ships x86_64 and Aarch64 builds and an APT or YUM repository
• Readers already buying this way, like those working through our pay-once picks for freelancers

Who should skip it

Three groups, and none of the reasons involve the quality of the capture.

• Developers who move between a desktop and a laptop every day, because the stated right is one computer
• Buyers who want a refund window in writing on the vendor's own page
• Teams who want phone or ticketed support with a published response time

The 30-day trial is the only safety net on the page

The Buy page says "You may try Charles for 30 days before purchasing a license. This enables you to evaluate Charles before deciding to purchase."

That is a full month of the real program, not a cut-down edition.

It also has to carry more weight than usual, because the page prints no refund terms of its own. It says instead that "Paddle provides all customer service inquiries and handles returns".

So the vendor's position is that returns exist, but the conditions live with the reseller. We did not find a stated window, a stated reason test, or a stated time limit on the Charles site on November 1, 2026.

Value: what the score is built from

The value score rests on three published facts and one absence.

The entry price is $50. Every 5.x update is included. A 30-day trial comes first, so nobody has to buy to find out.

The absence is the price of the next major version. A buyer in month one of a version cycle gets years of free point releases; a buyer in month thirty gets fewer, at the same price.

That timing risk is the honest deduction, and it is the same one we set out in our guide to how lifetime software deals actually work.

Ease of use: what the score is built from

Charles asks you to understand proxies before it helps you.

Traffic only appears once the browser or device is pointed at it, and HTTPS only becomes readable once its root certificate is installed and trusted. Neither step is hidden, but neither is automatic.

The vendor does list interface work in version 5: "an updated UI that looks more modern on all platforms", inline search in requests and responses, filters in tools dialogs, and grouping of focused, unfocused and encrypted hosts in the Structure view.

Those are vendor claims from a release description, not measurements. The score reflects a tool built for people who already know what a proxy is.

Features: what the Overview page lists for the money

The feature list is short, specific, and old enough to be stable.

SSL Proxying is named first, described as viewing "SSL requests and responses in plain text". Bandwidth Throttling simulates slower connections "including latency".

AJAX debugging renders XML and JSON as a tree or as text. Requests can be repeated to test back-end changes, edited to test different inputs, or stopped at breakpoints "to intercept and edit requests or responses".

Recorded HTML, CSS and RSS or atom responses can be validated through the W3C validator. AMF support for Flash and Flex remoting is still listed, which tells you how long this tool has been around.

The Download page adds one practical detail: Firefox no longer needs an add-on, and should be pointed at the system proxy settings instead.

Support: what is actually promised

Very little is promised, and the pages do not pretend otherwise.

There is a documentation section, a support page, and a Lost License Key facility for keys that never arrive. Educational pricing exists but requires contacting the developer.

The Buy page says a licence key is shown on screen and emailed immediately after purchase, and asks buyers to check spam if it does not appear within a few minutes.

No response time is published for any channel. For a one-developer product at $50 that is defensible, but it is the score to weigh if a stalled licence would stop your week.

Security history, since this tool reads your traffic in clear text

A debugging proxy decrypts HTTPS on purpose, so its own track record matters more than most.

XK72 keeps that record in the open on its home page news column rather than in a buried advisory feed.

Two entries are worth reading before you install anything. On 5 May 2018 the vendor published a "Charles Security Bulletin for a local privilege escalation in Charles 4.2 and 3.12.1 and earlier".

On 14 December 2021, during the log4j2 panic, it stated that "no version of Charles shipped or used any version of log4j and Charles is therefore thankfully unaffected by this issue".

Neither entry is a guarantee. Both are the kind of disclosure a one-developer vendor could quietly skip, and this one did not.

Platforms: one price, five builds

The Download page is the evidence, and it is specific down to the megabyte.

Windows is served by appx and msi packages on both x86_64 and Arm64, at 78.9 MB, 74.5 MB, 76.5 MB and 72.1 MB. The vendor recommends the appx package.

macOS ships as a 79.3 MB dmg. Linux ships as tarballs for x86_64 at 74.1 MB and Aarch64 at 73.1 MB, with APT and YUM repositories offering a package named charles-proxy5.

One licence price covers all of them. That is worth noting next to the per-platform pricing some editors still use, which we picked through in our iA Writer review.

Alternatives

Two realistic comparisons, one inside this category and one beside it.

Choose Proxyman if you want mobile capture apps bundled in, a printed money-back guarantee, and a release every few weeks. Otherwise choose Charles, which costs less and does not freeze your updates after a year.

If what you actually need is to see what changed between two files or two folders rather than two requests, a comparison tool is a different purchase altogether, and so is a database client like TablePlus.

For a text editor bought on the same terms, Sublime Text and BBEdit both sell a licence tied to a major version rather than a date.

What we could not verify

Four things, named rather than guessed.

The price of Charles 6 is not published. Only the 40% upgrade rule is.

The refund window is not published on the Charles site. The page points to Paddle and stops there.

The phrase "sensible use on a second computer" is not defined in any number we could find.

And the site disagrees with itself about the current release. The Download page says 5.2.2 while the news column's newest entry is Charles 5.1, dated 21 April 2026.

Both strings were on the site on November 1, 2026. Check the version yourself before assuming which one is stale.

Bottom line

Charles is a fifty-dollar licence with an unusually clear update rule and an unusually thin safety net.

You get every 5.x release for one payment, five platform builds, and thirty days to decide. You do not get a published refund window, a second-machine right, or a price for whatever comes next.

Buy it early in a version cycle and it is one of the better deals in developer tooling. Buy it late and you are paying full price for a shorter runway.

Before you pay, run the licence wording through the checklist in how to read a software deal before you pay.

Frequently asked

Sources

• Charles Buy page (prices, volume tiers, site licences, upgrade and trial terms, Paddle as merchant) - checked November 1, 2026
• Charles Download page (version 5.2.2, build sizes per platform, APT and YUM packaging) - checked November 1, 2026
• Charles Overview page (vendor description and key feature list) - checked November 1, 2026
• Charles home page news column (release dates for Charles 5 and Charles 5.1) - checked November 1, 2026

Visit Charles
We have no affiliate relationship with this vendor. Link goes to the official site.