"Interseptor" — from the Indonesian slang intersep (to intercept), plus -tor. It does exactly
what it says on the tin: it interseps your HTTP/HTTPS traffic so you don't have to squint at
DevTools like it's 2014.
A native intercepting proxy + security-testing toolkit, shipped as one static Go binary — no JVM to warm up, no license dongle, no "upgrade to Pro to export more than 3 findings." Point traffic at it, watch it flow, break things (yours, or things you're allowed to break).
Built for the AI-assisted pentester. You drive a fast web UI; your AI assistant drives the exact same engine through a real MCP server and a REST/SSE API — listing flows, replaying and mutating requests, fuzzing, scanning, toggling intercept — all under your direction, all on your machine, nothing phoned home.
⚖️ Responsible use. Interseptor is for testing systems you own or are explicitly authorized to test. Pointing it at traffic that isn't yours, or systems you don't have permission to test, is illegal in most places. That one's on you, not us.
- Intercept & edit HTTP/HTTPS live (hold, forward, drop — requests and responses) via a local CA, with match-&-replace rules.
- Repeater & Intruder — resend and mutate requests by hand, or run Sniper/Pitchfork/Race attacks with grep-match/extract and anomaly flagging.
- Scanner — passive checks out of the box, plus a deterministic active-scan engine, plus an autonomous Autopilot mode that plans and runs its own testing and files only findings it can prove (differential repro → adversarial review → OOB proof → human confirm for the scary ones).
- Extensible — write your own passive/active checks in sandboxed Starlark, no fork required.
- Mobile-ready — Android and iOS setup for HTTPS interception on real devices.
- AI & API native — a full MCP server and a REST/SSE API so an agent or script drives the same core as the UI, plus BYO-key AI assist (Anthropic, OpenRouter, GLM/Zhipu, OpenAI) for explaining requests and suggesting payloads.
That's the highlight reel — the full feature list covers WebSockets, HAR import/export, project bundles, collaboration/remote access, session & login macros, and more.
The quickest path — grab a prebuilt binary (no Go toolchain needed):
# macOS / Linux (pick your OS+arch from the Releases page)
curl -L https://github.com/Veyal/interseptor/releases/latest/download/interseptor_<version>_<os>_<arch>.tar.gz | tar xz
./interseptorOr, if you have Go 1.25+:
go install github.com/Veyal/interseptor/cmd/interseptor@latest
interseptorPackage managers (after the tap/bucket is seeded for a release — see packaging/):
brew install Veyal/tap/interseptorscoop bucket add Veyal https://github.com/Veyal/scoop-bucket
scoop install interseptorThat starts the proxy on 127.0.0.1:8080 and the UI on 127.0.0.1:9966. Point your traffic at the
proxy, trust the CA from Settings to decrypt HTTPS, and you're intersep-ing.
Prebuilt binaries, interseptor update, building from source, environment variables, and running
several projects at once are all in Getting started.
| Getting started | Install, quick start, HTTPS setup, configuration, multi-project |
| Full feature list | Every capability, in detail |
| API & MCP | Drive Interseptor from an AI agent or a script |
| Architecture | Security model, package layout, UI structure |
| Custom checks · active checks | Author your own Starlark checks |
| Rule packs | Share, install, and manage bundles of checks |
| Project vault | Always-on backup / import / merge (Tailscale Serve) |
| Engagement close-out | Checklist to leave a report-ready project |
| MCP cookbook | Copy-paste agent recipes |
| Contributing | Code standards, TDD, commit style, cutting a release |
| Security policy | Reporting a vulnerability in Interseptor |
| Roadmap & strategy | Why this exists, what's next, benchmarks |
| Changelog | What shipped, when |
MIT © 2026 veyal.