CaidoIO

🚀 New Official plugin in the Caido Store! "SAML Raider" decodes SAML next to Raw and Pretty, then lets you test signature wrapping (XSW1-8), stripped or re-signed signatures and XXE from Replay or Intercept, previewing every change as a diff. Available in the plugin store: cai.do/xrv

The Caido store is open! 🎉 Ever wanted to wear the tool you run all day? One shirt, one cap, three hoodies. Grab yours now: cai.do/f4i

🚀 New plugin in the Caido Store! "H1Caido" by @V3locidad_ automatically imports your HackerOne scopes into Caido, converting cleared URLs, domains, wildcards, and IPs into real Caido scopes without manual copying. Available in the plugin store: cai.do/5qr

🚀 New plugin in the Caido Store! Introducing "Race" by @amrelsagaei . Send synchronized request bursts through Caido's native replay pipeline. Select a sync strategy to record responses, status codes, and round-trip times in your project history. Available in the plugin store: cai.do/1qv

Bengaluru hackers, get ready! 🚀 Join HackerOne India South on Oct 3rd at 11:30 IST to supercharge Caido with Claude Code. @akshanshjaiswl is diving deep into live recon, request replaying, and tackling SSRF vulnerabilities against real lab targets. Lock in your spot today: cai.do/u2f

🚀 New plugin in the Caido Store! "ShadowShell" by @hahwul Run split-pane terminals directly inside Caido. Features presets for Claude, Gemini, and Codex, plus a global shortcut (Cmd/Ctrl+J) to toggle a dropdown terminal from anywhere in the app. Get it from the plugin store: cai.do/0b6

Hackers in Brazil! Pix Automático is now available at Caido checkout. Authorize recurring payments once in your bank app to automatically renew your subscription in Real, no credit card required. Update your payment settings: cai.do/1ov

Two years ago, we asked what Caido was missing, and here we go again. What tasks still force you to switch to another tool ⁉️ ⁉️ Blunt is fine. We’re taking notes.

The Plugin page in Caido v0.58.0 has been reworked 😉 All the 58+ plugins are listed with their quality rating, author, number of downloads and version. Official plugins that we maintain are marked with an Official badge. See it yourself: cai.do/81643f

Caido v0.58.0 lets you rearrange the sidebar. Drag the pages you open fifty times a day to the top, and hide the ones you never touch. Discover More: cai.do/81643f

Caido v0.58.0 adds header and body fields to HTTPQL. 👉️ req.header["Authorization"].cont:"Bearer" 👉️ resp.body.cont:"stack trace" No more scanning the full request just to target a single field. See how it works: cai.do/81643f

Caido v0.58.0 adds experimental HTTP/2 support to Replay and grouped requests. Plenty of targets run HTTP/2, and servers don't always handle requests the same way they do over HTTP/1.1. Full guide here : cai.do/81643f

Caido v0.58.0 adds Pipeline sessions to Replay. Batch a set of requests, send them in one run, and hunt for race conditions: ➡️ Sequential: Fires them in order. ➡️ Last Byte Synchronization: Holds the final byte of each request and sends them all at once. Read the details: cai.do/81643f

Caido v0.58.0 is here! 🎉 ✅ Replay Pipelines: Batch requests into a single run to test race conditions. ✅ Experimental HTTP/2: available in Replay and Pipelines. ✅ HTTPQL: Filter by header or body, instead of the full raw request. ✅ Plugins Page: New UI + custom sidebar. Download now: cai.do/1495d2

Prefer running your AI agent inside Caido?😉 Shift lives inside Caido and already sees your sitemap, scope, and findings. Open the Agents drawer, give it a task in plain English and go work on other things. docs.caido.io/app/tutorial...

Pentesters, can you trust your AI agents on a live engagement? See exactly what your hacking agents are doing, through a proxy-backed MCP. 👉 caido.io/blog/2026-07...

Paying for a Western dev tool from India usually means a declined card or a forex fee on top. Not anymore.🎉 UPI is now live on every Caido plan. India, you've been here from day one, and it's about time checkout caught up. Pick your plan at caido.io/pricing and pay how you actually pay.

Onboarding a contractor should not mean buying a seat forever.🫣 Caido Team licenses are reassignable: the seat that covers a contractor this month covers someone permanent next. Billing is centralized, one invoice not ten receipts.💪 Book a demo: www.caido.io/orgs/

Can you say, with certainty, where your team's testing traffic exited last week? 😉 Run Caido in your own infra. Traffic exits an egress IP you control. The team reaches one instance from any browser, and history lives in one central log.😎 Book a demo: www.caido.io/orgs/

Your AI agent tests blind.🫣 It cannot see your scopes, Match & Replace rules, or the requests already in your project. Connect it to Caido over MCP for live access to the whole project, not an isolated snippet. One setup the team shares.💪 Book a demo: www.caido.io/orgs/

AI testing in a team does not stall on capability. It stalls on control.💪 Bring your own provider and key: Anthropic, OpenAI, Google, or OpenRouter. The AI runs on an account you trust, not a black box. You pick the model and the project. Book a demo: www.caido.io/orgs/

You filter HTTP traffic in Caido with HTTPQL. WebSocket traffic didn't have an equivalent. v0.57.0 changes that. Introducing StreamQL: a Query language for filtering WebSocket messages in WS History, bringing it in line with HTTP History and Search. Download Now → www.caido.io/download

We built Caido to be API-first. Now an open source AI pentest agent drives Caido. Pentest Copilot from BugBase added support for Caido: HTTP History, Replay, Automate, OAST and more. It all runs on our official SDK, and works over MCP too. This is what API-first is for. github.com/bugbasesecur...

Testing WebSocket messages in Caido wasn't possible before v0.57.0. Now it is. 🎉 Send WS messages straight from the Replay page: - Create a new WebSocket session. - Set the initial HTTP request. - Start sending, then edit and resend frames as you go. Download Now → www.caido.io/download

We are aware of a cryptocurrency token utilizing our brand name and logo. We have no affiliation with any cryptocurrency project. Please be aware of scams.

Have you tried the open source AI hacking agent Strix? 🤖 Strix integrated Caido as their proxy of choice to provide observability, human-in-the-loop and shared context to the agents. We are now working on native guardrails. If you are building AI hacking agents, we can help you too!

Caido projects bloat across engagements. Project Minify by saltify7 Copy the essentials in one Project, Paste them in another. Bring only Scopes, Filters, Replay Sessions, Match & Replace rules and Environments. Give it a try 🔗 github.com/saltify7/Pro...

🚀New plugin in the Caido Store! "NextJS Actions Analyzer" by fir3cr4ckers Scan recorded Next.js traffic to identify Server Actions. Check out more details: github.com/yassinebk/Ca...

🚀New plugin in the Caido Store! Introducing "IIS Tilde Enumeration" by @hackerest.bsky.social Send tilde enumeration requests to discover existing short names for hidden IIS files and directories. Check out more details: github.com/Hackerest/Ca...

Ever wondered how hackers use AI? 🤖 We wrote a guide mapping the current landscape of AI-enhanced hacking. What else should we cover? 👇: caido.io/blog/2026-03...

🚀New plugin in the Caido Store! Introducing "DOMLogger++" by @mizu.re Track DOM-based flows to see how user input reaches sensitive browser APIs, with data captured by the browser extension. Check out more details: github.com/kevin-mizu/d...

🚀 v0.56.0 is here! This release introduces Match & Replace support within Replay and the ability to re-order collections or sessions for better organization. 👉 Download the update: caido.io/download

🚀New plugin in the Caido Store! Introducing "JS analyzer" by amrelsagaei Parse JavaScript responses to extract embedded artifacts such as API keys, endpoints, subdomains, and other exposed data. Check out more details: github.com/caido-commun...

🚀New plugin in the Caido Store! Introducing "RepoExplorer" by ChrisCz Open files from a GitHub repository and inspect their contents directly inside the app. Check out more details: github.com/ChrisCZ2/Rep...

🚀New plugin in the Caido Store! Introducing "Vibe Hacking" by vel Use an MCP tool surface to expose Caido data to AI agents, with total governance over tool calls. . Check out more details: github.com/vvvvvvvvvvel...

🚀New plugin in the Caido Store! Introducing "JQ" by Quan Le (Unit 515, OPSWAT) Run jq filters against captured JSON to quickly view specific keys, values, or nested data in requests and responses. Check out more details: github.com/aleister1102...

The Agentic Hacking Era is here and Caido is ready for it 🫡 Today we are releasing the first version of our Caido Skill in collaboration with Joseph Thacker (aka @rez0__) 🎉 All details in our blog: caido.io/blog/2026-03...

🚀New plugin in the Caido Store! Introducing "Host Header Injector" by oksuzkayra Run host header mutations from the right-click context in Replay or HTTP History. Check out more details: github.com/oksuzkayra/h...

Caido Instances can now be launched and controlled via GitHub Actions 🔁 Automate core tasks without manual intervention: ✅ Headless Plugins: Trigger features like scans on-demand. ✅ Regression Testing: Integrate security checks into CI/CD. Explore the tutorial: docs.caido.io/app/tutorial...

🚀New plugin in the Caido Store! Introducing "Notify" by xvffdos Send findings to Slack, Discord, or Telegram using Notify by ProjectDiscovery. Check out more details: github.com/MDGDSS/caido...

🎉 Raffle contest 🎉 As part of our sponsorship of Insomni'Hack conference, we have TWO conference tickets to give away! If you are near Lausanne (Switzerland) comment, like and repost to enter the raffle. 📅 Date: March 16-20, 2026 insomnihack.ch

Pentesters, you can now deploy pre-configured Caido instances to automate your audit infrastructure. ✅ Spin up clean instances between audits ✅ Control Caido via API in your CI/CD pipelines ✅ Use AI to initiate audits, then take over manually Read the tutorial: docs.caido.io/app/tutorial...

🚀 New plugin in the Caido Store! Introducing "HackerUtils" by bebiksior Access a collection of helpers to convert, generate, format, and manipulate values directly during manual testing. Check out more details: github.com/caido-commun...