Alternatives

Products that do what A local MitM proxy to control TLS fingerprints does

A local MITM proxy that lets you control TLS fingerprints (JA3/JA4), HTTP/2 fingerprints, HTTP header order, and User-Agent — all from a single YAML config file. - ytkoka/impersonate-proxy

1. 1M3
   Mitmproxy 3.0 released, an open-source console-based proxy▲242

   2018 · mitmproxy.org

2. 2
   Proxyman▲196

   An modern and intuitive HTTP debugging proxy

   2019

3. 3
   LocalXpose▲160

   Bye Bye Localhost, Hello World!

   2024

4. 4
   CtrlAI▲104

   Transparent proxy that secures AI agents with guardrails

   Mar 2026

5. 5BA
   Broxy – An HTTP/HTTPS intercept proxy written in Go▲106

   2020 · github.com

6. 6FB
   Fingerprinting browser-impersonating bots w/o JavaScript (open spec)▲6

   I've published an open specification for a detection method I'm calling RQ4 (Request Context Fingerprinting). It analyzes whether HTTP request headers are logically consistent with real browser behavior - not just what headers are present, but whether they make sense together given the request context.

   Mar 2026 · github.com

7. 7
   Kameleo▲87

   Avoid browser fingerprinting and use virtual profiles.

   2019

8. 8TA
   Tobab, a poor mans identity aware proxy. “BeyondCorp” for selfhosters▲42

   2020 · github.com

9. 9VO
   Verdaccio – Open-Source Lightweight private NPM proxy registry▲47

   2018 · verdaccio.org

10. 10
    Jumio Authentication▲72

    3D biometric authentication

    2019

11. 11IH
    Inspect-HTTP-Proxy: a tool to pretty-print JSON requests/responses▲8

    A simple Go-based HTTP proxy designed for detailed inspection of requests and responses. It logs traffic to the console with colorization, automatic decompression, and formatting for common content types, while remaining transparent to the client application. Ideal for debugging API interactions, understanding middleware behavior, or simply getting a clear view of HTTP traffic flow with jq-like pretty-printing & colorization of request/response. Automatically redacts parts of Authorization header to avoid token leakage.

    2025 · github.com

12. 12PP
    Potatso – Proxy tool on iOS▲50

    2017 · itunes.apple.com

13. 13PA
    Pichi – An application-layer proxy which can be controlled via API▲44

    2019 · github.com

14. 14AC
    A cross platform SOCKS5 proxy for TLS traffic inspection & manipulation▲5

    2025 · github.com

15. 15SS
    ssltun - simple secure HTTP proxy server with automic HTTPS in Golang▲16

    2020 · github.com

16. 16ZT
    zxc – terminal TLS intercepting proxy in Rust with tmux and Vim as UI▲7

    - Disk based storage. - Custom http/1.1 parser to send malformed requests. - http/1.1 and websocket support. Proxy: https://github.com/hail-hydrant/zxc Vim: https://github.com/hail-hydrant/zxc.vim

    2025 · github.com

17. 17
    whack.sh ▲5

    Whack the moles your current scanner can't see.

    Aug 2026 · whack.sh

18. 18PO
    Proxy Orbit – Rotating Web Proxy API for Pentesting▲12

    2019 · proxyorbit.com

19. 19IM
    I made a local proxy for AI tool calls to keep my API keys safe▲5

    May 2026 · github.com

20. 20GS
    GuardiAgent – Sandboxing / permission model for MCP servers▲9

    Anthropic's Model Context Protocol (MCP) has made it easy to spin up servers that expose tools and data to LLMs. A lot of these MCP servers run locally because they need access to your files, shell, browser, etc. The problem: they typically run with the same privileges as your user. If a server is buggy, misconfigured, or prompt-injected, it can do anything you can do: read SSH keys, exfiltrate dotfiles, poke around in private repos, etc. Our research group is working on this by adding a security manifest (inspired by the Android app manifest) plus a local policy enforcement engine that…

    Nov 2025 · guardiagent.com

21. 21
    Traceptor▲4

    HTTP/HTTPS PROXY · DEBUGGER for MacOS

    Jul 2026 · traceptor.com

22. 22
    Watching browser fingerprinting calls via Chromium's Blink layer▲15

    Kameleo 5.1 ships Fingerprint Inspector, a DevTools-style panel that shows exactly which fingerprinting calls a site makes, patched into Blink instead of monkey

    27d ago · kameleo.io

23. 23SC
    Single Command SSL/TLS Reverse Proxy with Autogen'd Certs (Golang)▲13

    2018 · github.com

24. 24RC
    Runtime configurable HTTP proxy designed for E2E testing, written in Go▲12

    2015 · github.com

Ranked by how close each launch is in meaning, then by votes. Refine with a description →