InterceptSuite Pro 2.2.0

13th November 2026

New features

• Traffic redirect (macOS) - the same feature as on Windows, now on the Mac. Open Proxy > Redirect, add rules by application (a process name such as curl, or a bundle id such as com.apple.Safari), host or IP, and port, and choose to send the traffic through the proxy, let it go direct, or block it. Rules are saved with the project. Redirect is off until you press Start, and Pause stops it for new connections without losing your rules. InterceptSuite itself is never redirected.
• Extensions can read the other packets of a connection. The new get_packets() call gives an extension every stored packet of the connection it is decoding, with direction, forwarded and captured bytes, whether it was edited or dropped, protocol and QUIC stream id. It works in Proxy History, Intercept and Replay. The HTTP/3 extension uses it to show headers that depend on earlier packets. See the Extension API reference.
• A free trial inside the app. The licence window has a Get a free trial section: enter your email and the trial key is sent to it.
• A privacy notice on first run.
• A reminder before your licence or trial ends
• Proxy History improvements. A new Stream column and stream == 6 filter for QUIC, and a dropped packet is now marked Dropped in the Modified column (modified == Dropped finds them).
• A refreshed look and a new app icon. One neutral graphite palette with a gold accent, and a clearer icon that stays readable at small sizes.

Fixes

• An upstream proxy is no longer forgotten when the proxy starts, restarts, or a project is reopened.
• Stopping or changing the proxy's settings no longer hangs when a connection stays open. It now takes about half a second.
• A restart no longer fails with "Port already in use" right after a stop.
• DTLS is more stable. Traffic in both directions at once could corrupt a session or crash the proxy. DTLS sessions are now limited to 1024, and a session that fails to set up is removed.
• QUIC streams no longer stall for up to 15 seconds on an idle connection.
• Every plain UDP flow now has its own connection id, so flows can be told apart and "Intercept response" applies to one flow only.
• Listen port 65535 is refused with a clear message.
• A bad line in the interception rules is no longer skipped silently. The rules are rejected and the rejected lines are written to the log.

Security

• Project files from other people are limited in size, so a crafted file can no longer exhaust memory.
• The MCP server limits request sizes, keeps its access token file owner-only, matches the bind address exactly, and clear_history now asks you in the app.
• The user data folder is owner-only on macOS and Linux
• Windows installers have signed uninstallers.