Roadmap
FlowMind aims to become an AI-Native Application Security Platform. This page outlines phased plans aligned with the flowmind-docs v1.0.0 baseline.
Product direction
FlowMind is evolving beyond a MITM proxy or Burp alternative toward:
- AI-Native Application Security Platform
- AI Security Workbench
Focus areas:
- Stronger context organization
- Stronger replay / fuzz capabilities
- Stronger AI reasoning and recommendations
- Better attack-chain and workflow understanding
Current baseline (v1.0.0)
Shipped capabilities include:
- ✅ Embedded Rust MITM (HTTP / HTTPS / WebSocket) and interceptor (Hold / Modify / Drop)
- ✅ Flow persistence, project management, logging
- ✅ Repeater, sequencer (orchestration / variables / assertions / sequence fuzz), fuzzer
- ✅ Passive scan + Rhai workspace rules (28 passive + 8 active built-ins) and active scan config
- ✅ AI: multi-provider chat, tool calling, MCP, Skills, delegation, smart replay/fuzz
- ✅ HTML report bundle / JSON / PDF export and clipping
AI scope change (2026-09-29)
Knowledge base / RAG, legacy memory UI, Attack Map, and related offensive workflows were removed. Public docs follow the current AI window (see AI Features).
Phases 1–2 and the main Phase 3 path are largely complete. Former Phase 4 graph/RAG deliverables are no longer the active plan.
Overview
mermaid
flowchart TD
Phase1["Phase 1: MITM Core"] --> Phase2["Phase 2: Replay & Fuzz Engine"]
Phase2 --> Phase3["Phase 3: AI Runtime Layer"]
Phase3 --> Phase4["Phase 4: AI Security Reasoning"]
Phase4 --> Phase5["Phase 5: Autonomous Security Agent"]
Phase5 --> Phase6["Phase 6: Enterprise Capabilities"]Phases
| Phase | Status | Notes |
|---|---|---|
| 1 MITM Core | ✅ Done | Proxy, certs, WebSocket, storage |
| 2 Replay & Fuzz | ✅ Done | Repeater, sequencer, fuzzer |
| 3 AI Runtime | ✅ Mostly done | Providers, tools, MCP, Skills |
| 4 AI reasoning | ⬜ Planned (rescoped) | Practical flows; not graph/RAG revival |
| 5 Autonomous agent | ⬜ Planned | Automated validation workflows |
| 6 Enterprise | ⬜ Planned | Teams, audit, SSO |
Priority view
| Tier | Focus |
|---|---|
| P0 | MITM, WebSocket, flows, replay, AI runtime, tools |
| P1 | Context budget, workflow discovery, smart replay |
| P2 | Tray, themes, plugin ecosystem, collaboration |