Download InterceptSuite Pro 2.0.0

InterceptSuite Pro 2.0.0
04 October 2026 - the major release.
New features
- Replay - send your own packets over TCP, TLS, STARTTLS, UDP, DTLS and QUIC, in as many tabs as you need. Sessions are saved with the project.
- Interception rules - hold only the packets you want, separately for client to server and server to client, with and/or rules on host, port, protocol, size, payload and Scope.
- Scope - define your targets, add them from Proxy History with a right-click, and filter by in-scope or out-of-scope traffic.
- TLS pass-through - relay selected targets untouched, for apps that pin certificates.
- Proxy History filters - Wireshark-style expressions such as port == 443 and data contains "token".
- Host and ALPN columns in Proxy History, for every protocol.
- AI access (MCP) - let an AI agent such as Claude Code or Claude Desktop read your history, change settings, use Replay and work the Intercept queue. Controlled from Settings, local only, and logged.
- HTTP/3 through the proxy - HTTP/3 support via QUIC.
- New Settings tab for upstream proxies, Scope and AI access.
- Extensions now receive the host, ALPN, protocol and packet id of each packet, and their tabs appear only when they apply.
- Hex Editor Hex Data tab now let you edit data in hex format.
Improvements
- QUIC: every stream of a connection is relayed, and several connections from one application all work.
- DTLS and TLS: correct server names are sent to the real server, which fixes sites behind CDNs.
- UDP: one slow server no longer stalls other clients, and multi-datagram replies are relayed in full.
- Faster TLS connection setup, a Proxy History search that no longer freezes on large histories, and lower memory use.
- Faster, safer project saving, with a "Saving..." indicator for large backlogs.
- The log now explains failed connections from clients that use Encrypted Client Hello (ECH).
Security
- The certificate authority's private key is now readable only by your user account.
- Updates are only accepted from secure links and must be signed by InterceptSuite.
- Many crashes and memory problems in the proxy were fixed.
Fixes
- Linux: the app now starts on current distributions (Ubuntu 22.04 and later, Fedora 35 and later). It no longer fails when libdl.so is missing.
- Interception now works on Linux and macOS.
- Interception no longer hangs after 100 held packets or when stopping the proxy.
- Proxy History is no longer empty after opening a saved project.
- Replay: no false "SSL read error", no DTLS freeze on disconnect, and binary data is sent unchanged.
- PCAP export: correct addresses in both directions, and QUIC and DTLS exported as UDP.
- Many fixes for crashes, hangs and lost data during long sessions.
- Encrypted Client Hello (ECH) detection
Upgrading from 1.3.0
- Existing projects open as they are, and the new features start empty or off.
- The interception direction switches moved to Proxy > Settings, next to the rules.
- Connection ID is no longer a rule check, and the IP checks are now one Server host or IP check. Saved rules keep working.
- Updates now require an installer signed by InterceptSuite.
Known limitations
- Connections that use Encrypted Client Hello (ECH) cannot be intercepted.