Nicheloom visits: 50,327 all-time · 9,276 in the last 7 days

The opportunity tracker for new startups.

Today: 2,656 launches · Niche of the day: casual mobile games · See what launched today →

opentrap

A free, open-source alternative to Burp Suite: an intercepting proxy and web app security testing suite with Repeater, Intruder, Collaborator and a built-in OWASP ZAP scanner. Linux, AGPL-3.0.

Get picks like this daily. Today's launch numbers, the top launches, AI and tech news, and a daily opportunity pick, straight to your inbox.

GITHUB · launched Oct 19, 2026 · 439 upvotes (top 2%) · 0 views

Niche: penetration testing tools · 128 launches, 10 in the last 7 days ▲ +67% · Explore this niche →

Category and tags

  • Security
  • Dev tools
  • Developer
  • Not AI
  • Hobby / open-source project
  • application-security
  • appsec
  • bug-bounty
  • burp-alternative
  • burp-suite
  • dast
  • +13 more

Visit website ↗ Source listing ↗

Could you build this?

Partial The UI shell (site map, issue view, repeater, collaborator dashboard) is vibe-codeable, but the scan engine is OWASP ZAP and would have to be wrapped rather than written. Building the intercepting proxy, MITM certificate handling, and out-of-band collaborator server still requires security engineering depth.

What it would actually take: Fork or wrap the OWASP ZAP engine via its API, add a desktop shell (e.g., Electron or Tauri) with a bundled Chromium preconfigured to use the local proxy and CA. The hard parts are a correct TLS-interception CA and proxy, an out-of-band DNS/HTTP collaborator server with per-payload attribution, and tuning active and passive scan rules. This needs an experienced appsec engineer plus ongoing maintenance against ZAP upstream changes.

Competitors

Other products that read as similar to this one : 1226 launches clear the similarity bar, closest 8 shown.

Attention rank: #24 of 1227 (itself plus its competitors, highest first, normalized so YC and Product Hunt are compared fairly).

Launched 355 days after the earliest competitor.

The niche, labels, vibe code rating and competitor comparison on this page are analysis by Nicheloom. If you use them, please credit nicheloom.com. How you may use our data.