Caido v0.49.0

Ian Bouchard
•
July 3, 2025
2 min read
This release brings two long-requested features: customizable workflow shortcuts and Markdown support in findings. Alongside these, we’ve fixed dozens of bugs and shipped quality-of-life improvements across the plugin SDK, Replay, and Intercept.
⚡ Workflow Shortcuts
You can now assign custom keyboard shortcuts to run specific workflows, making it faster than ever to trigger your favorite automations.
📝 Markdown in Findings
The finding editor now supports Markdown formatting. Use bold, - lists, code blocks and even images to better structure your findings.
🔥 Features
- 606: Add shortcuts to workflows
- 851: Option to close the replay tabs with the scroll wheel button of the mouse, just like browser tabs.
- 1068: Markdown support in findings editor
- 1194: Add timeout option for
sdk.requests.send
- 1195: Provide more meaningful messages in
sdk.requests.send
errors - 1275: Shortcut to switch between tabs in replay
- 1388: Frontend SDK - Add button next to replay session bar
- 1416: Move the "+ Create New Scope" option to the bottom of the context menu
- 1572: Add length on Body object in JS
- 1577: Force update a plugin
- 1597: Ctrl+F not working in intercept
- 1598: Replay editor dynamic extensions
- 1599: Add support for accessing scope in backend SDK
- 1602: Rework workflow limit for free users
- 1611: Plugin search
- 1634: Getter for Request or Request ID in Findings in the Backend SDK
- 1635: Add backend safe mode
🐛 Bug Fixes
- 1125: Change shortcut Icons
- 1137: Key bindings get reset every time the app is restarted and sometimes in the middle of use
- 1340: Long environment variable value hide the save button
- 1349: Custom Keyboard Shortcuts Not Functioning as Expected
- 1371: Dark-mode theme (+ window background) is only applied ~1sec after launching the main-window
- 1515: When default/preconfifured keybindings are changed to a users preference, it doesn't work
- 1564: Command palette not closing with
Esc
- 1570: Placeholder in Automate Goes Missing after an Attack Is Launched
- 1578: Reset credentials should not persist between restarts of the instance
- 1579: Httpql bar resets cursor to start of the box on
- 1581: Performance Issues with Response editor in Raw mode
- 1582: Typing in Match & Replace Condition moves cursor to start
- 1585: Host header IPv6 is parsed incorrectly
- 1588: Don't auto-select a project if there is a pending migration
- 1592: Response in intercept are not always respecting httpql
- 1607: HTTPQL query randomly disappears in Intercept
- 1613: Invisible proxy doesn't work with port redirect
- 1614: Proxying the caido calls should short circuit