HTTP toolkit for AI agents and security professionals

rqwstr is a professional HTTP security testing toolkit designed for AI agents and security professionals. It offers 17 tools covering the full HTTP testing workflow, including advanced attack techniques like race condition testing and IDOR detection. The product integrates with MCP-compatible AI assistants to automate and enhance security testing workflows, providing precise and efficient HTTP request crafting, sending, and analysis.
Native MCP server that works with any MCP-compatible client for AI-assisted testing.
Three HTTP backends including native Go, raw HTTP/1.1, and HTTP/2 framer for full control over requests.
H2 single-packet attack to detect time-of-check-to-time-of-use bugs with precise timing.
Variable profiles to swap user contexts instantly and replay requests to find authorization bugs.
All hunt data stored locally in SQLite databases, searchable and exportable.
Burp-style payload positions with wordlists and encoding chains for automated parameter discovery.
Core HTTP workflow for learners and evaluators with 12 core tools, local SQLite storage, offline use, MCP integration, request chaining, import/export, and community support.
Advanced attack tools for bug bounty hunters and security teams
No payment is needed for the free tier. After signup, run `rqwstr setup` to activate your free license.
Yes, rqwstr works entirely offline once set up with local SQLite storage.
Yes, you can manage your billing anytime through the dashboard with discounts for annual plans.
You keep all your hunt data and can downgrade cleanly to the free tier with limited tool access.
rqwstr runs as an MCP server allowing AI assistants to use all tools via natural language commands.
Traffic, engagement, sources and keywords are Similarweb-style estimates, refreshed monthly. Verified traffic comes from a connected Google Analytics / Search Console.
<a href="https://www.exitfounder.io/startup/rqwstr" target="_blank" rel="noopener"><img src="https://www.exitfounder.io/badge/rqwstr.svg" alt="rqwstr — featured on ExitFounder" width="220" height="56" /></a>Shows live Domain Rating and upvotes for rqwstr. Cached for an hour.
Have an alternative? Show it to everyone comparing rqwstr.
Appear on this page