We've just started looking at using Blackfire.io for this (on the back of a comment made by Nadav Kavalerchik in the Moodle Dev chat).
This *seems* like it would work for profiling even against a "live" service.
This *seems* like it would work for profiling even against a "live" service.