Alternatives · DevOps infrastructure
mitmproxy alternatives (2026)
mitmproxy: The standard open-source tool for seeing exactly what an app sends.
Its Catch: You have to install and trust its CA certificate on the device, and apps that pin certificates won't work without extra steps.
Below: 7 free or free-tier tools from the same category (infrastructure tools), free and open source first, then the closest match by shared tags. Each keeps its own Catch.
Free / OSS · OSS/MIT · 19.3k GitHub stars
VerdictA great free personal API client; budget a license for work use.
CatchThe app is free for personal use, but the pricing page says you need a paid license to use it at work (from $79/year per person). A younger ecosystem than Postman, with fewer team features.
Free / OSS · MPL-2.0 · 9.1k GitHub stars
VerdictA solid OSS load tester, especially for Playwright-based browser tests.
CatchThe hosted Artillery Cloud dashboard is a separate paid product; the CLI is the free part. Running at scale bills your own AWS account. k6 is the main alternative if you prefer scripting in JavaScript only.
Free / OSS · GPL-3.0 · 6.6k GitHub stars
VerdictThe easiest LDAP backend for a self-hosted stack.
CatchIt is deliberately not a full LDAP server: schema and features are limited, so some enterprise apps will not work. Still 0.x. Pair it with an SSO layer like Authelia for modern login flows.
Free / OSS · GPL-3.0 · 2.6k GitHub stars
VerdictA tidy home for your snippets that your agent can search as well.
CatchSmall project with a single main maintainer, so expect a narrower feature set than a full wiki. The MCP endpoint gives an assistant write access to your snippets, so scope the API key. GPL-3.0 if you redistribute modified versions.
Free / OSS · Apache-2.0 · 2.1k GitHub stars
VerdictA lightweight Auth0 alternative when you want users in your own database.
Catchv2 moved all configuration to CLI arguments and ignores .env files, which breaks older deployment recipes — read the migration guide. Much smaller community than Keycloak, Zitadel or Authentik. You own security updates.
Free / OSS · Apache-2.0 · 2.1k GitHub stars
VerdictA polished consumer-auth stack you can self-host — compare it with Zitadel first.
CatchSelf-hosting is a multi-service setup (Go servers, Postgres, Redis and more), and docs lean toward Authgear Cloud. Smaller community than Keycloak or Zitadel. SMS and WhatsApp OTP need your own provider and its costs.
Free / OSS · Open-Core · 25.1k GitHub stars
VerdictA strong self-hosted automation tool with good AI-agent support.
CatchThe LICENSE file is MIT except packages/ee, which is under a commercial license, so this is open-core and some enterprise features need a paid plan. GitHub shows no single license. Still pre-1.0.
FAQ
- What are the best free alternatives to mitmproxy?
- Yaak, Artillery, lldap, ByteStash, Authorizer. All are reviewed on Stack Gems in the same category (infrastructure tools); 7 free or open source.
- What is the catch with mitmproxy?
- You have to install and trust its CA certificate on the device, and apps that pin certificates won't work without extra steps.
- Is there an open-source alternative to mitmproxy?
- Yes: Yaak (OSS/MIT), Artillery (MPL-2.0), lldap (GPL-3.0), ByteStash (GPL-3.0).