Hetty vs SpiderFoot
Which should you use? A side-by-side look at what each one does, who it suits, what it costs, how hard it is to set up, and where each falls short.
Open source · MIT
A free, open-source web proxy for inspecting and testing HTTP traffic in security work.
Open source · MIT
Open-source tool that automatically gathers public information about a target to map its internet exposure.
The short answer
Choose Hetty if you need…
- Security researchers testing web applications
- Bug bounty hunters who want a free proxy with logging and search
- People who want to inspect and edit intercepted HTTP traffic
- Users comfortable running a local proxy and installing a root CA certificate
Choose SpiderFoot if you need…
- Security professionals doing reconnaissance during penetration tests or red team exercises
- Organizations checking what they have exposed on the internet
- Threat intelligence researchers who want to query many data sources in one place
- People who want to use free or low-cost OSINT sources, since most modules do not require API keys
Side-by-side
| Hetty | SpiderFoot | |
|---|---|---|
| Type | App | App |
| Price | Free and open source | Free and open source |
| Licence | MIT | MIT |
| GitHub stars | 12.5k | 24.2k |
| Setup difficulty | Intermediate | Intermediate |
| How you get it | Install with a package manager | Clone and build from source |
| Main language | Go | Python |
| Last code update | 4 months ago | 7 months ago |
What each one is
Hetty
Hetty is an HTTP toolkit for security research that sits between your browser and a website as a man-in-the-middle proxy. It logs the requests and responses passing through, lets you search them, intercept and edit traffic before it is sent, and replay or craft requests. The project describes itself as an open-source alternative to commercial tools like Burp Suite Pro.
SpiderFoot
SpiderFoot is an open-source intelligence (OSINT) automation tool. It connects to many data sources and runs modules that feed each other to collect and analyze information about a target such as a domain, IP address, or email address. It has a web interface and can also be run from the command line.
Best for
Hetty
- Security researchers testing web applications
- Bug bounty hunters who want a free proxy with logging and search
- People who want to inspect and edit intercepted HTTP traffic
- Users comfortable running a local proxy and installing a root CA certificate
SpiderFoot
- Security professionals doing reconnaissance during penetration tests or red team exercises
- Organizations checking what they have exposed on the internet
- Threat intelligence researchers who want to query many data sources in one place
- People who want to use free or low-cost OSINT sources, since most modules do not require API keys
Strengths
Hetty
- Free and MIT-licensed, with source code available on GitHub
- Covers core proxy features: logging, interception, replay and scope in one tool
- Installable through common package managers on macOS, Linux and Windows, or via Docker
SpiderFoot
- Over 200 modules covering many data sources, most without requiring API keys
- Offers both a web interface and command-line use
- MIT licensed and actively developed since 2012 according to the README
Not ideal for
Hetty
- People looking for a fully polished, feature-complete replacement for Burp Suite Pro: the README says it is under active development and aims to become an alternative
- Anyone testing systems they do not have permission to test, since intercepting traffic raises legal and ethical issues
- Non-technical users who need a point-and-click tool with extensive guided help, since the README points to external docs for setup
SpiderFoot
- People who need a fully managed, cloud-hosted service; the README points to SpiderFoot HX for that
- Anyone without authorization to investigate the targets they enter, since the tool gathers data on people and systems
- Beginners with no networking or security background, as results need interpretation
Trade-offs
Hetty
- The README states it is under active development, so features may be incomplete or change
- Documentation is mainly external (hetty.xyz); the README itself gives only brief setup detail
- Intercepting HTTPS requires trusting its root CA certificate, which carries security implications if misused
SpiderFoot
- Some modules need API keys, and many of those with keys are tiered or paid rather than free
- Features like cloud hosting, multi-user collaboration, and REST API are only in the paid SpiderFoot HX version
- The README is truncated here, so detailed setup requirements beyond the basic install are not fully covered
Getting started
Hetty
macOS (Homebrew)
brew install hettysoft/tap/hettyLinux (Snap)
sudo snap install hettySpiderFoot
Clone the development build from git
git clone https://github.com/smicallef/spiderfoot.gitInstall Python libraries
pip3 install -r requirements.txtFrequently asked questions
What is the difference between Hetty and SpiderFoot?
Hetty: A free, open-source web proxy for inspecting and testing HTTP traffic in security work. SpiderFoot: Open-source tool that automatically gathers public information about a target to map its internet exposure. Hetty suits security researchers testing web applications, while SpiderFoot suits security professionals doing reconnaissance during penetration tests or red team exercises.
Are Hetty and SpiderFoot free?
Hetty: Free and open source. SpiderFoot: Free and open source.
Is Hetty or SpiderFoot more popular?
SpiderFoot has more GitHub stars (24.2k) than Hetty (12.5k). Popularity isn't the same as fit — check which one matches your use case above.
What are other alternatives to Hetty and SpiderFoot?
Other options people compare them with include mitmproxy, ProxyPool, Web Check, Maigret.
Keep comparing
Built from our catalogue entries for both products: open-source details come from each project's README (AI-assisted, refreshed weekly) and GitHub data; AI-tool details are editorial. Spotted something wrong? Let us know from either product's page.