A field kit for the web

Dissect any website. From your phone.

Desktop DevTools, rebuilt for your thumb. Inspect the DOM, read every request, edit live and hunt the bug — no cable, no laptop.

Full 30-day trial · then €5.99/year · iPhone · iPad · Android

Network.getResponseBody · full body
heap +12.4 MB after the route
shop.acme.io/checkout
ElementsNetworkConsoleStorageMemory
checkout.js120
stripe.js88
/api/cart912
hero.avif210
Uncaught TypeError: cart.total is undefined
3 cookies without SameSite
DOMContentLoaded 1.42 s

The tray

Seven instruments. One for each layer of the web.

Every panel is the real thing, not a toy console. They open from a sliding tray — peek, half, full — with big touch targets and gestures built for your thumb.

01

Elements

Tap to select any node. DOM tree, CSS cascade and the box model with real calipers. Event listeners per node, search the tree, edit as HTML and add attributes.

tap-to-inspectbox modellistenerslive edit
02

Console

A full REPL over the page: evaluate JS, catch console.* with levels and stack traces, and filter out the noise. Renders console.table and groups, with live autocomplete against the page.

evalconsole.tableautocomplete
03

Network

Every request in a touch waterfall with real DNS/TLS/TTFB timing (Android) and initiator. Headers, payload and the response body. Block requests, browse with no cache, follow WebSockets live, replay requests and export HAR.

waterfallblockWebSocketHAR
04

Storage

Cookies with every attribute (expires, SameSite, Secure, httpOnly), localStorage, sessionStorage, IndexedDB (databases → stores → records) and cache. Read, edit and delete per domain.

cookiesindexeddbper domain
05

Memory

Memory usage and the real heap size on Android; on iOS, an estimate with a heads-up. Take a measurement and see what grows between navigations.

real heap (Android)estimate (iOS)
06

Sources

View source with highlighting, prettify minified code, and override resources to test changes without touching the server.

view sourcepretty-printoverrides
07

Page

One-tap audit: a score across SEO, security (real CSP/HSTS headers), Core Web Vitals and accessibility. Exportable to Markdown.

SEOsecurityCore Web Vitalsexport

The interceptor

From observer to test bench.

Modify requests and responses on the fly — no proxy, no certificates, straight from the browser. On Android it intercepts every request, not just fetch/XHR.

01

Breakpoints

Pause a request before it goes out, or before its response reaches the page. Edit method, URL, headers, body or status, then continue — or abort it. A safety auto-continue means the page never hangs.

breakpointreq / resabort
02

Map local

Answer an endpoint with a local body — status, headers and body — without touching the network. Perfect to simulate error states or responses that don't exist yet.

Map localmock
03

Map remote · Redirect

Rewrite the target URL to another server: staging, a mock, or your own machine.

Map remotestaging
04

Rewrite + scripting

Find/replace in headers and body with a declarative rule, or a JS function (req)=>req / (res)=>res for custom transforms.

find/replaceJS hook
05

Compose requests

Build a request from scratch — method, URL, headers and body — and send it. The response opens with a navigable JSON tree, a GraphQL view and image previews.

composeGraphQLJSON

The workstation

More than inspecting: building and debugging.

The same browser that's already your test bench becomes your API and PWA workstation: build requests, save responses and debug service workers without leaving the phone.

01

Local Overrides

Save any request's response and serve it locally, persistent across reloads and navigations. Test states that don't exist yet without touching the server.

overridespersistente
02

Request collections

Save and organize requests in folders, with variables and environments, Bearer or Basic auth and pre-request scripts. Send and explore the response with a JSON tree, GraphQL and image previews.

coleccionesentornosauth
03

Portable workspace

Export and import your whole debugging setup — interception rules, blocks, snippets, collections and environments — in a single file. Share your setup or take it to another device.

exportimport
04

Application panel

Inspect Service Workers (status, unregister, update), Cache Storage (caches and entries, delete) and the Web App Manifest with its installability check. Debug real PWAs.

Service WorkersCacheManifest
05

Prebid

See the header bidding auction on the real phone, no cable: ad units, which bidders answered and which timed out, winning CPMs and a bar chart of the whole auction. It only shows up on pages that use Prebid.

ad unitsbidderstimelineUser IDs
06

Glossary

What every button, icon and panel does, explained in plain language and searchable. Because DevTools shouldn't require already knowing DevTools.

9 languagessearchable

In the field

Four things that today still need a laptop.

A

That 912 ms request

You open the waterfall, sort by duration and see /api/cart blocking the checkout. You copy the header and move on.

B

The cookie you shouldn't see

You read a session httpOnly cookie that JavaScript can't reach, check SameSite and edit it to reproduce the bug.

C

The wrong copy, live

You select the node with your finger, change the content and style in the tree, and check the fix before opening the editor.

D

The bug that only happens on mobile

The console catches the TypeError with its full stack — the one you never reproduce in the desktop simulator.

Real fidelity

Not a fake injected console.

On Android, Scalpel connects to the same instrumentation protocol desktop Chrome uses — real response bodies, real heap, real network throttling. On iPhone and iPad, a precision inspection agent gives you parity of DOM, console, network and storage.

Pricing

A professional tool. One price, once a year.

Scalpel Pro
€5.99/ year

The first 30 days, full and free. No card to start.

  • All seven instruments, no limits
  • Response bodies, HAR and request replay
  • httpOnly cookies, IndexedDB and resource overrides
  • Memory readings and one-tap page audits
  • iPhone, iPad and Android with a single subscription

Coming soon to the App Store and Google Play

30-day trial on download · renews at €5.99/year · cancel anytime

3 friends subscribed with your code? Your next renewal drops to €3.99/year.