Sites and apps similar to Caido include Fiddler, which has a free version. Other options are mitmproxy, Burp Suite, Charles and Proxyman. You can choose from more than 10 HTTP(S) Debuggers like Caido for Mac, Linux, Windows, iPhone and iPad.
Web Debugging Proxy that logs all HTTP(S) traffic for comprehensive analysis. It allows manipulation of traffic, supports scripting, and extends with .NET. Debugs virtually any application, implementing man-in-the-middle interception with self-signed certificates. Freeware, ideal for developers.
United States
mitmproxy is an SSL-capable man-in-the-middle proxy for HTTP. It provides a console interface that allows traffic flows to be inspected and edited on the fly. It also features mitmdump, a commandline tool that provides a tcpdump-like interface for saving, viewing and...
Burp Suite is an integrated platform for performing security testing of web applications. Its various tools work seamlessly together to support the entire testing process, from initial mapping and analysis of an application's attack surface, through to finding and exploiting...
United Kingdom
Charles is an HTTP proxy / HTTP monitor / Reverse Proxy that enables a developer to view all of the HTTP and SSL / HTTPS traffic between their machine and the Internet. This includes requests, responses and the HTTP headers (which contain the cookies and caching information).
New Zealand
Monitor, intercept and debug HTTP/HTTPS and WebSocket traffic on macOS, iOS, Windows, and Linux. Includes advanced features such as Breakpoint, Map Local/Remote, scripting, filtering, reverse proxy, DNS spoofing, and automation for backend development.
United States
The Zed Attack Proxy (ZAP) is an easy to use integrated penetration testing tool for finding vulnerabilities in web applications.
Lonkero is a high-performance web vulnerability scanner built in Rust for penetration testers and bug bounty hunters who are tired of slow, bloated tools that generate hundreds of false positives.
Finland
EU
Open-source native macOS HTTP debugging proxy — intercept HTTPS, inspect APIs, mock responses, debug WebSocket & GraphQL. Community-driven. For developers, by developers.
Type awkward test values into any field with one shortcut. Nine packs of values that break forms: invisible Unicode, trailing spaces, impossible dates, length limits, CSV formulas. Each says what it breaks. GUI + CLI.
PolandEU
Modern HTTP debugging tool, Debug, mock, and rewrite HTTP/HTTPS traffic with composable rules.
United States
Interceptor is a local-first desktop HTTP/HTTPS proxy for authorized security testing, traffic capture, replay, diagnostics, and evidence-ready reporting.
Scan your APIs for prompt injection and 12 security checks in less than a minute, MCP, CLI and GH Action ready to CI/DI integration.
Mexico
