burp-alternative

A free, open-source alternative to Burp Suite: an intercepting proxy and web app security testing suite with Repeater, Intruder, Collaborator and a built-in OWASP ZAP scanner. Linux, AGPL-3.0.

Moxy is an open-source DAST tool designed for modern web application security testing. It provides an easy-to-use interface with agentic capabilities to assist and automate pentesting workflows.

Free, self-hosted alternative to Burp Suite Pro — MITM proxy + full active scanner (SQLi/XSS/SSRF/XXE/SSTI/smuggling), recon→CVE, OAST, nuclei-style templates, and a CI security gate. Qt6/C++, MIT, no telemetry.

Inspect. Intercept. Modify. A lightweight, browser-native Chrome MV3 extension for authorized HTTP interception and testing.

AI friendly HTTP/HTTPS MITM Proxy

MITM proxy for TCP/TLS/DTLS/UDP traffic, with STARTTLS, IoT, Thick Client and more.

Sentinel V6 — Lightweight open-source Burp Suite alternative, intercepting proxy, and web security fuzzer built with Rust and Tauri by Pavan.

Burp-free raw HTTP tape runner: capture, replay, extract, assert and export exchanges as curl/HAR/raw, with request+command steps and 50 validated skills.