See every request.
Test with intent.
Vector is a free, native web-security workbench — an intercepting proxy and toolkit for authorized testing that files findings straight into your Pratimāna Matrix programs.
| GET | app.example.test | /api/v2/profile | 200 |
| POST | app.example.test | /api/v2/orders/4471 | 200 |
| GET | api.example.test | /api/v2/users/2208 | 403 |
| POST | auth.example.test | /oauth/token | 200 |
| GET | api.example.test | /api/v2/invoices/33 | 500 |
authorization: Bearer eyJhbGciOiJI…
content-type: application/json
{ "action": "cancel" }
Every tool on one dock.
Vector puts the whole testing loop behind a single native shell — capture, craft, and analyse without leaving the app.
Intercept and live traffic stream — every request and response, searchable and flagged.
Host tree and in-scope sitemap built from what you've seen.
Craft and replay requests by hand, tweak and resend.
Fuzzing and payload spraying across parameters and endpoints.
Content and directory discovery for the surface you're mapping.
Passive access-control checks as you browse.
Out-of-band listener for callbacks and blind findings.
Encoder, decoder and JWT inspector for payloads and tokens.
Response comparison to spot what a change moved.
Token randomness visualiser for session and CSRF values.
Built to be fast, small, and yours.
Native Rust core
The proxy and storage are compiled Rust behind a lightweight Tauri shell — no JVM, no heavy runtime. It starts fast and stays out of your way.
Content-addressed storage
Bodies are stored once by hash, metadata in SQLite. A long engagement stays small on disk and search stays quick.
Files into Matrix
Turn a captured exchange into a report in your Pratimāna Matrix program — request, response, CVSS vector, and scope match carried across.
Cross-platform
One codebase builds signed bundles for macOS, Windows and Linux, each packaged the way that platform expects.
Free & open
No licence key, no per-seat pricing, no locked features. A capable proxy suite that a solo researcher can just run.
Authorized by design
An intercepting proxy sees only the traffic you route through it, on machines you control — a tool for testing systems you own or are permitted to test.
Get Vector for your platform.
Free to download and run. Point your browser at Vector's proxy and start reading traffic.
# prerequisites: Rust (rustup.rs), Node 20+, Tauri CLI cargo install tauri-cli --version '^2' # clone, install the UI deps, and build the app bundle (the app lives under app/) git clone https://github.com/pratimana/pratimana-vector.git cd pratimana-vector/app npm --prefix ui install cargo tauri build # the installer lands under # app/src-tauri/target/release/bundle/
For authorized testing only
Vector is a security-testing tool. Use it only against systems you own or have explicit permission to test — your own applications, or a program whose scope authorizes it. An intercepting proxy inspects only traffic you deliberately route through it, on machines you control.