RISCO iRISCO alarm systems - Don’t buy them

Well, recently Risco decided to move from the free to subscription based services. Nothing unseen but really bad to have.
That said, I was analyzing the alarm console and it has a parameter for the server used for the cloud services APP control (xml proxy IP).
What would be the best tool to sniff the XML requests being done? Did any of you face this issue already?
I also take the opportunity to recommend not buying any products from them.