About Mitmproxy
mitmproxy is an interactive HTTPS proxy that can intercept, inspect, modify, and replay web traffic including HTTP/1, HTTP/2, HTTP/3, WebSockets, and other SSL/TLS-protected protocols. It provides a command-line interface, a web interface called mitmweb, and a Python API via mitmdump.
It is designed for penetration testers and software developers. The tool supports prettifying and decoding various message types, intercepting specific messages on-the-fly, modifying them before they reach their destination, and replaying them to a client or server. It also has a scripting API for automating modifications, redirecting traffic, visualizing messages, and implementing custom commands.
Key features
- Intercepts, inspects, modifies, and replays web traffic
- Supports HTTP/1, HTTP/2, HTTP/3, WebSockets, and other SSL/TLS-protected protocols
- Prettifies and decodes message types from HTML to Protobuf
- Provides a graphical interface via mitmweb
- Offers a Python scripting API via mitmdump
- Has a community ecosystem of addons and tools
Good fit for
- Debugging and testing web applications
- Penetration testing
- Privacy measurements
Mitmproxy: questions and answers
- What is Mitmproxy used for?
- mitmproxy is a free and open source interactive HTTPS proxy that intercepts, inspects, modifies, and replays web traffic for debugging, testing, and penetration testing. It is a good fit for debugging and testing web applications, penetration testing, and privacy measurements.
- Is Mitmproxy open source?
- Yes. Mitmproxy is open source under the MIT licence. Its source code is on GitHub at mitmproxy/mitmproxy and is written mainly in Python.
- Is Mitmproxy free?
- Yes. Mitmproxy is open source, so the software itself is free to use.
- Can I self-host Mitmproxy?
- Yes. Mitmproxy can be self-hosted on your own server or infrastructure.
- What is Mitmproxy an alternative to?
- Mitmproxy is an open-source alternative to Fiddler, Proxyman and Charles Proxy. Other open-source alternatives to Fiddler include Insomnia, Wireshark and Requestly.
- Is Mitmproxy actively maintained?
- Yes. The most recent commit to Mitmproxy was on 13 October 2026, and the latest release is v12.2.3, published on 12 May 2026. The project has 46k stars on GitHub.
Open-source alternatives to Mitmproxy
See all
Insomnia
API Tools
The open-source, cross-platform API client for GraphQL, REST, WebSockets, SSE and gRPC. Wi
Apache-2.0vs Postman★ 40k
Wireshark
Networking & VPN
Read-only mirror of Wireshark's Git repository at https://gitlab.com/wireshark/wireshark.
GPL-2.0vs Fiddler★ 10k
Requestly
API Tools
Community hub for Requestly API Client — bugs, feature requests, and roadmap. The privacy-
OSSvs Postman★ 6.8k
Httptoolkit
Developer Tools
HTTP Toolkit is a beautiful & open-source tool for debugging, testing and building with HT
OSSvs Fiddler★ 3.7k
Surge
Open source
CLI for the surge.sh CDN
OSSvs Cloudflare Pages★ 3.1k
SoapUI
Testing & QA
SoapUI is a free and open source cross-platform functional testing solution for APIs and w
OSSvs Apidog★ 1.7k
SaaS alternatives to Mitmproxy
See all
Fiddler
API Tools
Telerik web debugging proxy for inspecting HTTP and HTTPS traffic
SaaS
Proxyman
API Tools
Native macOS HTTP debugging proxy for inspecting app network traffic
SaaSCharles Proxy
API Tools
HTTP and HTTPS debugging proxy for inspecting and rewriting traffic
SaaS
AgentsAegis
Security
Proxy that injects realistic traps into AI coding assistant workflows to train safer command use
SaaSAudn.AI
Security
Automated external black-box penetration testing for AI agents, endpoints and production systems
SaaSComplyeah
Security
External vulnerability scans and penetration tests for verified domains with control-mapped reports and certificates
SaaS

