Hetty is an HTTP toolkit for security research that provides an open source alternative to commercial penetration testing platforms.
The tool addresses the need for a capable HTTP proxy and request manipulation environment tailored to infosec professionals and bug bounty hunters. It works as a machine-in-the-middle proxy that logs traffic and enables advanced searching, while also functioning as an HTTP client for manually crafting and editing requests. Users can intercept both requests and responses for manual review, edit them in place, and replay them. The tool organizes work through scope support and project-based database storage, all accessible via a web-based administrative interface.
Hetty suits security researchers and penetration testers who need a self-hosted, open source alternative to commercial tools. It is particularly valuable for those conducting bug bounty work or professional penetration testing who want to avoid licensing costs and maintain control over their infrastructure. The project explicitly positions itself as an alternative to commercial software in this category, making it relevant for teams already evaluating such platforms.
The project is under active development with an openly maintained backlog. The maintainer actively solicits feedback from professional penetration testers through community surveys. The tool is distributed across multiple package managers for macOS, Linux, and Windows, with Docker images available via both GitHub Container Registry and Docker Hub, indicating attention to accessibility across deployment environments. Documentation is maintained at a dedicated site with getting started guides and comprehensive reference material. Community engagement is facilitated through a Discord server, and the project accepts contributions following published guidelines.
