Prefer running your AI agent inside Caido?😉 Shift lives inside Caido and already sees your sitemap, scope, and findings. Open the Agents drawer, give it a task in plain English and go work on other things. docs.caido.io/app/tutorial...

Pentesters, can you trust your AI agents on a live engagement? See exactly what your hacking agents are doing, through a proxy-backed MCP. 👉 caido.io/blog/2026-07...

Agentic Pentesting with MCP

How proxy-backed MCP gives pentesting teams speed and visibility into what their agents are doing.

caido.io

Paying for a Western dev tool from India usually means a declined card or a forex fee on top. Not anymore.🎉 UPI is now live on every Caido plan. India, you've been here from day one, and it's about time checkout caught up. Pick your plan at caido.io/pricing and pay how you actually pay.

Onboarding a contractor should not mean buying a seat forever.🫣 Caido Team licenses are reassignable: the seat that covers a contractor this month covers someone permanent next. Billing is centralized, one invoice not ten receipts.💪 Book a demo: www.caido.io/orgs/

Can you say, with certainty, where your team's testing traffic exited last week? 😉 Run Caido in your own infra. Traffic exits an egress IP you control. The team reaches one instance from any browser, and history lives in one central log.😎 Book a demo: www.caido.io/orgs/

Your AI agent tests blind.🫣 It cannot see your scopes, Match & Replace rules, or the requests already in your project. Connect it to Caido over MCP for live access to the whole project, not an isolated snippet. One setup the team shares.💪 Book a demo: www.caido.io/orgs/

AI testing in a team does not stall on capability. It stalls on control.💪 Bring your own provider and key: Anthropic, OpenAI, Google, or OpenRouter. The AI runs on an account you trust, not a black box. You pick the model and the project. Book a demo: www.caido.io/orgs/

You filter HTTP traffic in Caido with HTTPQL. WebSocket traffic didn't have an equivalent. v0.57.0 changes that. Introducing StreamQL: a Query language for filtering WebSocket messages in WS History, bringing it in line with HTTP History and Search. Download Now → www.caido.io/download

We built Caido to be API-first. Now an open source AI pentest agent drives Caido. Pentest Copilot from BugBase added support for Caido: HTTP History, Replay, Automate, OAST and more. It all runs on our official SDK, and works over MCP too. This is what API-first is for. github.com/bugbasesecur...

Running an Automate attack and then scrolling raw responses to find the one value you actually care about is a waste of time. Caido v0.57.0 adds Custom Extractors to Automate.

Testing WebSocket messages in Caido wasn't possible before v0.57.0. Now it is. 🎉 Send WS messages straight from the Replay page: - Create a new WebSocket session. - Set the initial HTTP request. - Start sending, then edit and resend frames as you go. Download Now → www.caido.io/download

Caido v0.57.0 is out. 🎉 The headliners: - WebSocket in Replay: send WS messages straight from the Replay page. - Custom Extractors in Automate: pull a regex match into its own results column. - StreamQL: filter WS messages in WS History.

Caido v0.57.0 | Caido

Caido aims to help security professionals and enthusiasts audit web applications with efficiency and ease.

caido.io

We are aware of a cryptocurrency token utilizing our brand name and logo. We have no affiliation with any cryptocurrency project. Please be aware of scams.

Have you tried the open source AI hacking agent Strix? 🤖 Strix integrated Caido as their proxy of choice to provide observability, human-in-the-loop and shared context to the agents. We are now working on native guardrails. If you are building AI hacking agents, we can help you too!

Caido × Strix | Caido

Caido aims to help security professionals and enthusiasts audit web applications with efficiency and ease.

caido.io

Caido projects bloat across engagements. Project Minify by saltify7 Copy the essentials in one Project, Paste them in another. Bring only Scopes, Filters, Replay Sessions, Match & Replace rules and Environments. Give it a try 🔗 github.com/saltify7/Pro...

🚀New plugin in the Caido Store! "NextJS Actions Analyzer" by fir3cr4ckers Scan recorded Next.js traffic to identify Server Actions. Check out more details: github.com/yassinebk/Ca...

🚀New plugin in the Caido Store! Introducing "IIS Tilde Enumeration" by @hackerest.bsky.social Send tilde enumeration requests to discover existing short names for hidden IIS files and directories. Check out more details: github.com/Hackerest/Ca...

Ever wondered how hackers use AI? 🤖 We wrote a guide mapping the current landscape of AI-enhanced hacking. What else should we cover? 👇: caido.io/blog/2026-03...

2026 03 24 Ai Enhanced Hacking | Caido

Caido aims to help security professionals and enthusiasts audit web applications with efficiency and ease.

caido.io

🚀New plugin in the Caido Store! Introducing "DOMLogger++" by @mizu.re Track DOM-based flows to see how user input reaches sensitive browser APIs, with data captured by the browser extension. Check out more details: github.com/kevin-mizu/d...

🚀 v0.56.0 is here! This release introduces Match & Replace support within Replay and the ability to re-order collections or sessions for better organization. 👉 Download the update: caido.io/download

🚀New plugin in the Caido Store! Introducing "JS analyzer" by amrelsagaei Parse JavaScript responses to extract embedded artifacts such as API keys, endpoints, subdomains, and other exposed data. Check out more details: github.com/caido-commun...

🚀New plugin in the Caido Store! Introducing "RepoExplorer" by ChrisCz Open files from a GitHub repository and inspect their contents directly inside the app. Check out more details: github.com/ChrisCZ2/Rep...

🚀New plugin in the Caido Store! Introducing "Vibe Hacking" by vel Use an MCP tool surface to expose Caido data to AI agents, with total governance over tool calls. . Check out more details: github.com/vvvvvvvvvvel...

🤖 @trace37_labs shared recently how they use Caido as a core part of their autonomous hunting platform. labs.trace37.com/blog/caido-a...

One Proxy. One AI. One System: Integrating Caido into mastermind-ai (Part 1)

How I seamlessly integrate Caido into mastermind-ai to create a single offensive security platform.

labs.trace37.com

🚀New plugin in the Caido Store! Introducing "JQ" by Quan Le (Unit 515, OPSWAT) Run jq filters against captured JSON to quickly view specific keys, values, or nested data in requests and responses. Check out more details: github.com/aleister1102...

The Agentic Hacking Era is here and Caido is ready for it 🫡 Today we are releasing the first version of our Caido Skill in collaboration with Joseph Thacker (aka @rez0__) 🎉 All details in our blog: caido.io/blog/2026-03...

Announcing AI-driven Caido

Introducing the new Client SDK and AI Skill

caido.io

🚀New plugin in the Caido Store! Introducing "Host Header Injector" by oksuzkayra Run host header mutations from the right-click context in Replay or HTTP History. Check out more details: github.com/oksuzkayra/h...

Caido Instances can now be launched and controlled via GitHub Actions 🔁 Automate core tasks without manual intervention: ✅ Headless Plugins: Trigger features like scans on-demand. ✅ Regression Testing: Integrate security checks into CI/CD. Explore the tutorial: docs.caido.io/app/tutorial...

Using Caido in GitHub Actions | Documentation

Learn how to orchestrate Caido in GitHub Actions for CI/CD

docs.caido.io

🚀New plugin in the Caido Store! Introducing "Notify" by xvffdos Send findings to Slack, Discord, or Telegram using Notify by ProjectDiscovery. Check out more details: github.com/MDGDSS/caido...

🎉 Raffle contest 🎉 As part of our sponsorship of Insomni'Hack conference, we have TWO conference tickets to give away! If you are near Lausanne (Switzerland) comment, like and repost to enter the raffle. 📅 Date: March 16-20, 2026 insomnihack.ch