Unify your OAST provider management and consolidate all interactions into a single, streamlined workflow.

Caido plugin to send HTTP requests to external CLI security tools with preview, batch execution, and live output

Caido plugin that hunts CSP misconfigs & cracks headers wide open.

Multi-terminal plugin for Caido with AI presets and instant Cmd+J access

A simple yet effective JavaScript Logger Plugin for Caido, built to streamline the discovery of JS files during web app testing.

A Caido extension written in Typescript that makes an OPTIONS request and determines if other HTTP methods than the original request are available. If there are other methods available, findings are created on the fly which will be enhanced based on pending further capabilities from the Caido SDK.

Caido plugin to cap and split workspace files by size — ideal for proxy files/log uploads with file size limits.

Caido plugin to track all params in history

Curated registry of community-built plugins and extensions for the Ogma web security proxy

Safe editable CSRF proof-of-concept generation for Caido

A Caido plugin that tests requests for Web Cache Deception (WCD) — when a caching layer stores an authenticated user's response under a static-looking URL and then serves it to anonymous users.

Passive server-side and DOM open-redirect candidate triage for Caido

Bring your HackerOne programs, scopes and reward tables straight into Caido — the HackerOne counterpart to YesWeCaido.

Caido plugin for background JavaScript secret discovery, sensitive-file triage, and false-positive review

OWASP WSTG checklist, passive candidate discovery, evidence verification, and reporting for Caido