Invisible

What is Invisible?

Some web services hide in plain sight. They’re live, public, reachable - but locked behind a single HTTP header. No header, no access. The site might as well not exist.

Invisible injects custom HTTP headers on any domain, straight from your browser. No proxy. No code change. No external tool. Just the right header at the right time.

Features

• Per-domain injection - Add headers to specific domains. Subdomains covered automatically.
• Named profiles - Switch between configs in one click. Pentest, dev, staging - one profile each.
• Bulk import - Paste headers or load CSV. Set up dozens of rules in seconds.
• 100% local - Zero data leaves your browser. Everything stays in chrome.storage.local.
• Lightweight - Less than 1Mb. No bloat. Instant popup. Dark theme.

Who is it for?

Built for pentesters, developers, and anyone who needs to knock on a door that most people don’t even know exists.

• 100% offline - zero network activity, zero data collection
• No crowdsourced features - fully standalone
• Read the privacy policy