Description: Cawght watches how your web app behaves, then tries to break its business rules. Traditional security scanners catch XSS and SQL injection — but they don't know that your discount code should only work once, that only admins can delete posts, or that User A shouldn't access User B's data. Cawght does. How it works: 1. Open the sidebar and click Start Recording. 2. Use your web app normally — browse, click, submit forms. 3. Click Stop & Test — Cawght analyzes the captured traffic. 4. AI generates adversarial test scenarios targeting business logic. 5. Tests run automatically and findings are reported with evidence. What it catches: * Privilege escalation * IDOR (Insecure Direct Object Reference) * State manipulation * Business constraint violations * Data isolation failures Privacy & Requirements: * Bring your own AI key (Gemini, OpenAI, or Anthropic). * No data is collected without your explicit action.

Latest version

Version 2.1.1

Older versions

Version 2.1.0

Version 2.0.1

Version 2.0.0