Caido

What it is

A lightweight intercepting proxy with a modern interface, and a direct alternative to Burp Suite and ZAP. Traffic flows through a local instance where you can pause requests, edit them, and search the history with its own HTTPQL filter language.

What it helps with

- Capturing and modifying browser requests before they reach the server
- Replaying and tweaking individual requests during manual testing
- Building workflows and adding plugins to automate repetitive checks
- Filtering large request histories with HTTPQL queries

Who it's for

Web pentesters, bug bounty hunters, and AppSec engineers testing applications they own or are authorized to assess.

Worth knowing

The free Basic plan caps projects, workflows, and plugins, while paid plans lift those limits and add an AI assistant and team features. New releases arrive roughly monthly.

Can it be installed on more than one machine?
Yes, every plan allows unlimited installations.

Is there an option for students?
Students and teachers can get a free one-year Education plan.

Where do feature requests go?
They are filed in the public GitHub repository.