Intercepting proxy
HTTP/1.x + HTTP/2, TLS, and raw request control.
v1.0.0 — now available
The evidence-first security workbench.
Manual-first testing for people who need to know what broke, why it broke, and how to prove it. Cross-platform. Precise. Zero false-positive theater.
WindowsmacOSLinuxNo account required
NULLHAWK / INTERCEPTv0.8.1
142requests03findings100%evidence
Built for security teams who verifyManual firstEvidence alwaysSafe by defaultOpen formats
01 / The workbench
Everything between “interesting” and proven.
Repeater
Edit, replay, compare. Keep every mutation in context.
Scope-checked crawler
Map the app without wandering outside your rules.
Passive + active scanners
Find signal, then prove it with a safe exploit path.
Access-control testing
Make authorization gaps visible across the whole app.
Intruder
Run controlled payloads with evidence attached to every result.
Recon / offense toolset
One focused workspace for the work between requests.
Findings + reports
Markdown, HTML, JSON, and SARIF. Ready for the next handoff.
02 / Why Nullhawk
Less noise.
More signal.
A scanner can tell you something looks wrong. Nullhawk helps you show exactly what happened — with the request, response, diff, and steps to reproduce attached.
01Every finding cites the exact request
02Reproduce before you report
03No black-box “trust me” results
03 / Pricing
Start free. Go deeper.
No seat math. No feature maze. Pick the workbench that matches the depth of your testing.
Free
$0
For learning the workflow.
Download- Intercepting proxy
- Repeater + passive recon
- Findings and reporting
- Personal projects
Pro
$PRICE / year
For serious application testing.
Get Pro- Everything in Free
- Active scanner
- Whole-app access-control sweep
- Mobile + desktop analysis
- Cloud key validation
Team / Enterprise
Let’s talk
For teams that need control.
Contact sales- Everything in Pro
- Shared workspaces
- SSO + policy controls
- Priority support
04 / Download
Put Nullhawk on your machine.
Unsigned builds for now. SHA256 checksums included with every release.
Need a hand?
Read the docs. Then break something safely.
Is Nullhawk a replacement for Burp Suite?
Nullhawk is built to keep the operator in control. Every action is scoped, reviewable, and tied back to the traffic that produced it.
What does evidence-first mean?
Nullhawk is built to keep the operator in control. Every action is scoped, reviewable, and tied back to the traffic that produced it.
Are active scans safe?
Nullhawk is built to keep the operator in control. Every action is scoped, reviewable, and tied back to the traffic that produced it.