InterceptSuite Pro 2.0.0

04 October 2026 - the major release.

New features

• Replay - send your own packets over TCP, TLS, STARTTLS, UDP, DTLS and QUIC, in as many tabs as you need. Sessions are saved with the project.
• Interception rules - hold only the packets you want, separately for client to server and server to client, with and/or rules on host, port, protocol, size, payload and Scope.
• Scope - define your targets, add them from Proxy History with a right-click, and filter by in-scope or out-of-scope traffic.
• TLS pass-through - relay selected targets untouched, for apps that pin certificates.
• Proxy History filters - Wireshark-style expressions such as port == 443 and data contains "token".
• Host and ALPN columns in Proxy History, for every protocol.
• AI access (MCP) - let an AI agent such as Claude Code or Claude Desktop read your history, change settings, use Replay and work the Intercept queue. Controlled from Settings, local only, and logged.
• HTTP/3 through the proxy - HTTP/3 support via QUIC.
• New Settings tab for upstream proxies, Scope and AI access.
• Extensions now receive the host, ALPN, protocol and packet id of each packet, and their tabs appear only when they apply.
• Hex Editor Hex Data tab now let you edit data in hex format.

Improvements

• QUIC: every stream of a connection is relayed, and several connections from one application all work.
• DTLS and TLS: correct server names are sent to the real server, which fixes sites behind CDNs.
• UDP: one slow server no longer stalls other clients, and multi-datagram replies are relayed in full.
• Faster TLS connection setup, a Proxy History search that no longer freezes on large histories, and lower memory use.
• Faster, safer project saving, with a "Saving..." indicator for large backlogs.
• The log now explains failed connections from clients that use Encrypted Client Hello (ECH).

Security

• The certificate authority's private key is now readable only by your user account.
• Updates are only accepted from secure links and must be signed by InterceptSuite.
• Many crashes and memory problems in the proxy were fixed.

Fixes

• Linux: the app now starts on current distributions (Ubuntu 22.04 and later, Fedora 35 and later). It no longer fails when libdl.so is missing.
• Interception now works on Linux and macOS.
• Interception no longer hangs after 100 held packets or when stopping the proxy.
• Proxy History is no longer empty after opening a saved project.
• Replay: no false "SSL read error", no DTLS freeze on disconnect, and binary data is sent unchanged.
• PCAP export: correct addresses in both directions, and QUIC and DTLS exported as UDP.
• Many fixes for crashes, hangs and lost data during long sessions.
• Encrypted Client Hello (ECH) detection

Upgrading from 1.3.0

• Existing projects open as they are, and the new features start empty or off.
• The interception direction switches moved to Proxy > Settings, next to the rules.
• Connection ID is no longer a rule check, and the IP checks are now one Server host or IP check. Saved rules keep working.
• Updates now require an installer signed by InterceptSuite.

Known limitations

• Connections that use Encrypted Client Hello (ECH) cannot be intercepted.