Sniper review
A focused, open-source proxy for capture, interception, replay, fuzzing, and traffic analysis.
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Sniper is an open-source desktop web security proxy for macOS and Windows, with a command-line interface and headless proxy and UI server options. It is aimed at penetration testers, bug bounty hunters, security researchers, and developers working on API debugging or traffic analysis. The application supports HTTP forwarding, HTTPS man-in-the-middle interception, HTTP history, traffic capture, WebSocket inspection, request and response modification, and replay of captured requests. Its MIT license also makes it suitable for teams that prefer an open-source tool they can examine and adapt.
Its strongest fit is security-focused traffic analysis rather than general-purpose API mocking. Sniper can fuzz requests with payloads, restrict activity through host and wildcard scope filters, and passively scan for sensitive data exposure, CORS issues, header problems, and JWT issues. The JSON-first CLI broadens its use beyond the desktop interface, supporting automation and headless operation. These capabilities give developers a focused workflow for examining real traffic, changing requests or responses, and repeating security checks across captured interactions.
Sniper should appeal to users who want an open-source proxy with interception, replay, WebSocket visibility, fuzzing, passive scanning, and CLI control in one tool. Its published positioning does not establish mocking, breakpoints, or proxy chaining as capabilities, so teams centered on those workflows should choose an alternative. Linux users should also wait for validation before making it their primary proxy. For macOS and Windows users whose priority is security testing and API traffic inspection, Sniper offers a clearly defined, narrow focus without a paid-plan structure.
Sniper pros and cons
- Where it wins
- Captures, intercepts, edits, and replays HTTP/HTTPS traffic
- Inspects WebSocket sessions and frames
- Combines fuzzing, scope filters, scanning, and CLI automation
- Where it doesn't
- Linux validation is still pending
- Not suited to workflows requiring mocking or breakpoints
- Proxy chaining is not established as a supported capability
Sniper fact sheet, pricing and score →
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update