Kampala (YC W26) wants to turn apps into APIs — instantly

What the product claims to do

It has been reported that Kampala, a startup showcased on Launch HN, can reverse-engineer websites, mobile apps, and desktop apps into usable APIs in real time. The product allegedly shows every HTTP/S request from any app or browser, maps tokens, cookies, sessions and even multi-step sequences automatically, and can capture those sequences to replay them as stable automations. The company says it preserves HTTP/TLS fingerprinting so intercepted traffic behaves like the original client — a claim that should make security teams sit up and take notice.

The pitch and the catch

In plain terms: legacy workflows become dependable endpoints for agents and internal systems. Want to scrape a private web flow, automate a multi-step login for a bot, or wrap a legacy UI in a modern API? Kampala promises to do that without the months of reverse engineering and brittle scripting. Windows support is reportedly coming, and there's a waitlist for early access — so expect early adopters and curious security researchers to sign up fast.

This is where excitement meets a thud of reality. Tools that intercept and replay traffic are nothing new — think Burp Suite or mitmproxy — but Kampala pitches automation at scale and with less fuss. Handy, yes. A potential privacy and abuse vector? Also yes. How do you build safeguards when a tool is built to mimic real clients perfectly? Questions about consent, legal exposure, and platform policy compliance will follow.

Why this matters now

If the claims hold up, Kampala could accelerate automation work across enterprises, help glue together brittle systems, and cut costly integration time. But the emotional core is tension: the same power that makes engineers giddy also keeps lawyers and product-security folks awake at night. Interested teams can join the waitlist on the startup’s site; until independent reviews appear, many of Kampala’s more ambitious claims remain — appropriately — alleged.

Sources: zatanna.ai, Hacker News