What mitmproxy does

mitmproxy is a free, open-source interactive HTTPS proxy project that enables developers, security researchers, QA engineers, and network administrators to intercept, inspect, modify, and replay HTTP/1, HTTP/2, HTTP/3, WebSockets, and other SSL/TLS-protected traffic. The project is distributed under the MIT license and ships as three integrated tools: the mitmproxy command-line interface, the mitmweb web-based graphical interface modeled on Chrome DevTools, and the mitmdump Python API for scripting and automation. Underlying the product is a Python-based proxy core with a sans-I/O architecture that separates protocol logic from I/O operations, supporting a typed addon infrastructure for extensibility. Recent versions have added full HTTP/3 support, WireGuard proxy mode, local capture across Windows/macOS/Linux, and Interactive Contentviews for binary protocol editing.

mitmproxy operates without a direct revenue model. The project is maintained by three co-creators — Aldo Cortesi, Maximilian Hils, and Thomas Kriechbaumer — with support from a broader open-source community, Google Summer of Code contributors (since 2012 under the Honeynet Project umbrella), and organizational sponsors including NLnet, Proxyman, Netograph.io, LLC.org, vpsserver.com, Route4Me, and Netrouting. Distribution is entirely self-serve across direct downloads, Homebrew, Docker Hub, Microsoft Store, and GitHub Releases, with no paid marketing or sales motion. Adoption is primarily tracked through community metrics: 44.2k GitHub stars, 4.6k forks, active GitHub Discussions, and a Slack developer chat. The project is horizontally positioned across developer tooling, security testing, and API debugging use cases.

Name

mitmproxy

Legal name

Mitmproxy Project

Website

https://mitmproxy.org

Company type

Private

Founded year

2018

Operating status

Operating

Headcount range

1–10 employees

Short description

mitmproxy is a free, MIT-licensed open-source interactive HTTPS proxy that lets developers, security researchers, and QA engineers intercept, inspect, modify, and replay HTTP/HTTPS, WebSocket, and HTTP/3 traffic across CLI, web UI, and Python API interfaces.

Ownership category

akta.pro rank

Product category

Network Proxy & Traffic Inspection Software

NAICS

Computer Systems Design and Related Services (54151)

SIC

Services-Prepackaged Software (7372)

akta.pro primary industry

API Security & Service-to-Service Security (mTLS, Service Mesh Security) (HDABAHAN)

Keywords

• Interactive HTTPS proxy
• Web traffic interception
• Open source debugging tools
• Network protocol analysis
• Developer traffic inspection

GTM type

B2B

Offering type

Software

Cost components

Technology or R&D, Personnel, Operations, Infrastructure, Others

Revenue model

1. Open Source / No Direct Revenue: mitmproxy is a free and open source project with no direct revenue model. The project is maintained by volunteers and contributors with sponsorship support from organizations like NLnet. It operates as a community-driven open source project.

Pricing tiers

Go-to-market motion2 records

Distribution channels5 records

Marketing channels6 records

Core offering

mitmproxy is a free and open source interactive HTTPS proxy suite that intercepts, inspects, modifies, and replays web traffic including HTTP/1, HTTP/2, HTTP/3, WebSockets, and other SSL/TLS-protected protocols. It is delivered through three tools: mitmproxy (command-line interface), mitmweb (graphical web interface), and mitmdump (Python scripting API). It serves developers, security researchers, and QA engineers for debugging, testing, privacy measurements, and penetration testing.

Product overview

mitmproxy is a free and open source suite of interactive HTTPS proxy tools, available as three core products: mitmproxy (command-line interface), mitmweb (graphical web interface), and mitmdump (Python API scripting tool). These tools enable intercepting, inspecting, modifying, and replaying web traffic including HTTP/1, HTTP/2, HTTP/3, WebSockets, and other SSL/TLS-protected protocols. The product supports powerful addon extensions written in Python, with capabilities for content decoding, traffic filtering, request interception, and protocol-specific analysis.

Differentiator

Problem solved

Functional benefit

Brands

• mitmweb: Web interface for mitmproxy providing graphical UI similar to Chrome DevTools
• mitmdump
• mitmproxy console

Products and services

• mitmproxy (Command Line) The primary command-line interactive HTTPS proxy tool serving as a swiss-army knife for debugging, testing, privacy measurements, and penetration testing. Supports interception, inspection, modification, and replay of HTTP/1, HTTP/2, HTTP/3, WebSockets, and SSL/TLS-protected protocols.
• mitmweb The graphical web interface component of mitmproxy, providing a Chrome DevTools-like experience for any application or device with additional features such as request interception and replay.
• mitmdump The Python API scripting tool for writing powerful addons and automating mitmproxy. The scripting API offers full control for automatically modifying messages, redirecting traffic, visualizing messages, or implementing custom commands.

Quantifiable outcome

• 44.2k GitHub stars indicating strong community adoption
• +1 more outcomes

Segments4 records

Ideal customer profiles4 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature12 records

Partnerships

One partnership is on record.

• Honeynet ProjectcoreStrategic or Co-development Partner · 1 January 2012mitmproxy has participated in Google Summer of Code under the umbrella of the Honeynet Project since 2012. Many of mitmproxy's current co-leaders started as GSoC students. The Honeynet Project provides organizational support and mentorship infrastructure for open source security tool development.

Scale indicators6 records

Recent moves6 records

Expansion highlights5 records

Others

• Tcpdump: Tcpdump is a foundational open-source command-line packet analyzer. While operating at a lower level than mitmproxy (raw packets vs. application-layer HTTPS), it serves a related traffic-analysis audience and is often used alongside mitmproxy for network troubleshooting.

Broad incumbents

• Fiddler (Telerik): Fiddler is a long-established commercial HTTP debugging proxy owned by Progress/Telerik. It serves the same traffic-interception use case as mitmproxy but as part of a broader developer-tools portfolio, and is widely deployed in enterprise Windows environments.
• Wireshark: Wireshark is the canonical open-source network protocol analyzer. While it operates at lower OSI layers and is broader in scope, it overlaps with mitmproxy on encrypted-traffic analysis and is used by the same network administrator and security researcher personas.
• Burp Suite (PortSwigger): Burp Suite is the leading commercial web vulnerability scanner and intercepting proxy for security testing. While its primary use case is penetration testing rather than general debugging, it overlaps with mitmproxy on HTTPS interception, traffic modification, and security research workflows.

Direct peers

• Charles Proxy: Charles Proxy is a commercial HTTP/HTTPS debugging proxy widely used by developers for traffic interception and inspection. It is the most-cited direct commercial alternative to mitmproxy, sharing the same core use case (web debugging, SSL/TLS interception) but offered as paid desktop software rather than free open source.
• OWASP ZAP: OWASP ZAP is a free, open-source web application security scanner with an intercepting proxy. Like mitmproxy, it is open source and targets security researchers and developers, though ZAP is more focused on active vulnerability scanning rather than general traffic debugging.
• Proxyman: Proxyman is a native macOS HTTP debugging proxy that is a current financial sponsor of mitmproxy. It competes directly in the same developer-tooling category with a polished GUI experience, yet sponsors mitmproxy — indicating overlapping audiences and complementary positioning.

Emerging players

• ngrok: ngrok provides secure tunnels and traffic inspection for developers exposing local services. While its core offering is tunneling rather than interception, it overlaps with mitmproxy in developer traffic-inspection workflows and shares the same PLG, self-serve distribution model.
• Insomnia (Kong): Insomnia is an open-source API client and debugging tool that supports HTTP/WebSocket inspection and proxying. It serves the same developer/QA personas as mitmproxy, with partial overlap on API debugging and HTTP traffic analysis workflows.
• HTTP Toolkit: HTTP Toolkit is an open-source-friendly HTTP debugging tool that focuses on intercepting traffic from any device or application with one-click setup. It targets a similar developer persona but emphasizes interception usability, partially overlapping with mitmproxy's mitmweb offering.

Market position

Strengths4 records

Weaknesses4 records

Competitive moat5 records

Key risks5 records

Key highlights7 records

Customer concentration

• Xx.com/favorites
• GitHubgithub.com/mitmproxy/mitmproxy
• LinkedInlinkedin.com/company/mitmproxy

Revenue estimate

Valuation estimate

Number of profiles

Profiles3 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about mitmproxy