nowfound

Life & fun · January 17, 2023

Caido, a lightweight web security auditing toolkit

Hi HN! I’m Emile, co-founder of Caido [0]. Today, we are launching the public beta of Caido, a lightweight web security auditing toolkit. While our tool is mostly geared toward pentesters and bug bounty hunters, we thought some of you might find it useful. The web security auditing toolkit space hasn't seen much innovation in recent years, with current tools feeling outdated and lacking in performance and user experience. As the number of security professionals continues to increase, there is a growing need for a user-friendly alternative. This is what motivated us to create Caido. At its…

Caido, a lightweight web security auditing toolkit launched on January 17, 2023 with 17 votes, #1,301 of 3,901 launches that month and more than 75% of that year's launches. The site was still online in September 2026, 3 years on.

Visit caido.io ↗Alternatives

In plain words

Caido is a lightweight web security auditing toolkit designed for penetration testers and bug bounty hunters. It functions as a proxy between users and target systems, enabling traffic recording and filtering, request tampering, exploit testing, and parameter brute forcing. The tool prioritizes performance and user experience, addressing gaps in a market where existing solutions are considered outdated and lacking modern usability standards.

written from the facts on this page · September 2026

From the sources

Caido aims to help security professionals and enthusiasts audit web applications with efficiency and ease.

The web hacking toolkit designed to scale manual testing through AI and teamwork . From solo hunters to security teams , backed by a rapidly growing ecosystem. Discover how Caido fundamentally changes how web assessments are performed. Launch autonomous agents to draft payloads and execute tasks while you focus on critical logic. Search requests and responses with precision using our intuitive HTTPQL syntax. Build ad-hoc automation workflows on the fly with a powerful node-basedfrom caido.io

In the maker’s words, at launch

Hi HN! I’m Emile, co-founder of Caido [0]. Today, we are launching the public beta of Caido, a lightweight web security auditing toolkit. While our tool is mostly geared toward pentesters and bug bounty hunters, we thought some of you might find it useful. The web security auditing toolkit space hasn't seen much…

Does a similar job

all alternatives →
  • I made tool that let's you see everything about any website2024 · v1.web-check.xyz · ▲411

    Yes, it's open source: https://github.com/lissy93/web-check :) Why I'm building this? There are a lot of tools out there for discovering meta and security data relating to a website, IP or server. But currently, there isn't anything that does everything, all in one place and without a paywall/ user sign up. It's still a WIP, and I'm working on a new version, with some more comprehensive checks, so any feedback would be much appreciated :)

  • Site Audit by cognitiveSEO2018 · cognitiveseo.com · ▲117

    Audit your site for improved SEO and conversions!

  • CC
    Codex context bloat? 87% avg reduction on SWE-bench Verified tracesApr 2026 · npmjs.com · ▲10

    If you had to build a context window manager in 24h, would you stick to the existing model or come up with something better? Here's what I did: 1. Built a proxy that intercepts Codex's calls to OpenAI and rewrites them on the fly. 2. Replayed 3,807 rounds of SWE-bench Verified traces through it: avg prompt 44k → 6k tokens (-87%). 3. Posted it to HN to get the next reduction applied to my confidence interval — starting with the inevitable "How about accuracy?" npx -y pando-proxy · github.com/human-software-us/pando-proxy

  • A native Hacker News reader with integrated todo/done tracking2025 · github.com · ▲54

    Hey HN! I'm excited to share a tool I've been working on - a native Hacker News reader built with Rust and egui. Here's a screenshot: https://github.com/haojiang99/hacker_news_reader/blob/main/s.... As a daily HN reader, I've always struggled with keeping track of interesting posts I want to read later. Browser tabs pile up, bookmarks get forgotten, and I lose track of what I've already read. I needed a way to: 1. Browse HN efficiently (across all sections - hot, new, show, ask, jobs, best) 2. Quickly mark posts as "todo" for later reading 3. Mark posts as…

  • MCP Security Suite2025 · github.com · ▲36

    Hi HN! We kept seeing devs get pwned through MCP tools in ways that security scanners completely miss. So we built an open-source analyzer to catch these attacks. Our first OSS by Mighty team. The problem: At Defcon, we saw MCP exploits with 100% success rate against Claude and Llama. Three attack patterns: Hidden Unicode in "error messages" - Paste a colleague's error into Claude, your SSH keys get exfiltrated Trusted tool updates - That database tool you've used for months? Last week's update added credential theft Tool redefinition - Malicious tool redefines "deploy to prod" to run…

  • Tangent – Security log pipeline powered by WASMNov 2025 · github.com · ▲28

    Hi HN! We’re Ethan and Danny, the authors of Tangent (https://github.com/telophasehq/tangent), a Rust-based log pipeline where all normalization, enrichment, and detection logic runs as WASM plugins. We kept seeing the same problems in the OCSF (https://ocsf.io) community: 1) Schemas change constantly. Large companies have whole teams dedicated to keeping vendor→OCSF mappings up to date. 2) There’s no shared library of mappings, so everyone recreates the same work. 3) Writing mappers is tedious, repetitive work. 4) Most pipelines use proprietary DSLs that are…

More life & fun this month

the category →

Source: Show HN post ↗ · launch text quoted in part

Launched alongside, January 2023

the whole month →
  • New AI edits images based on text instructions▲1,098

    This works suprisingly well. Just give it instructions like "make it winter" or "remove the cars" and the photo is altered. Here are some examples of transformations it can make: Golden gate bridge: https://raw.githubusercontent.com/brycedrennan/imaginAIry/ma... Girl with a pearl earring: https://raw.githubusercontent.com/brycedrennan/imaginAIry/ma... I integrated this new InstructPix2Pix model into imaginAIry (python library) so it's easy to use for python developers.

    AI · 2023 · github.com

  • HyperSwitch▲715

    Fast, reliable, and affordable open source payments switch

    Dev tools · 2023 · hyperswitch.io

  • I've built a C# IDE, Runtime, and AppStore inside Excel▲670

    The project is called QueryStorm. It uses Roslyn to offer C# (and VB.NET) support in Excel, as an alternative to VBA. I've posted about it before, but a lot has changed since then so figured I'd share an update. The current version includes a host of new features, namely a C# debugger, support for NuGet packages, and the ability to publish Excel extensions to an "AppStore" (which is essentially a NuGet repository). The AppStore can be used by anyone with the (free) runtime component. Another great addition is the community license, which is a free license for individuals and small companies…

    Work · 2023 · querystorm.com

  • I'm a doctor and made a responsive breathing app for stress and anxiety▲666

    Hey HN! Some more info: I’m an NHS doctor and the founder of Pi-A (https://www.pi-a.io) which developed Lungy (https://www.lungy.app). Lungy is an app (iOS only for now) that responds to breathing in real-time and was designed to make breathing exercises more engaging and beneficial to do. It hopefully has many aspects of interest to the HN community – real-time fluid, cloth and soft body sims running on the phone’s GPU. My background is as a junior surgical trainee and I started building Lungy in 2020 during the first COVID lockdown in London. During COVID, there were…

    Life & fun · 2023 · lungy.app

  • Product Hunt Rewind 2022▲620

    Your 2022 on Product Hunt

    Life & fun · 2023

  • LaunchPedia▲616

    200+ handpicked tools to skyrocket your product launch

    Growth · 2023 · launchpedia.co