caido · Sytten · May 27, 2025 · May 20, 2025 · May 20, 2025 · May 27, 2025
diff --git a/.vitepress/sidebars/guides.ts b/.vitepress/sidebars/guides.ts
@@ -34,6 +34,10 @@ export const guidesSidebar: DefaultTheme.SidebarItem[] = [
           },
         ],
       },
+      {
+        text: "Guest Mode",
+        link: "/guides/guest_mode",
+      },
     ],
   },
   {
@@ -42,6 +46,10 @@ export const guidesSidebar: DefaultTheme.SidebarItem[] = [
       {
         text: "Network",
         items: [
+          {
+            text: "Domain Allowlist",
+            link: "/guides/domain_allowlist",
+          },
           {
             text: "Proxying Local Traffic",
             link: "/guides/proxy_local",

diff --git a/.vitepress/sidebars/reference.ts b/.vitepress/sidebars/reference.ts
@@ -
10000
8,6 +8,10 @@ export const referenceSidebar: DefaultTheme.SidebarItem[] = [
         text: "Introduction",
         link: "/reference/",
       },
+      {
+        text: "CLI Options",
+        link: "/reference/cli",
+      },
       {
         text: "Environment",
         link: "/reference/environment",

diff --git a/src/_images/guest_mode_selection.png b/src/_images/guest_mode_selection.png
diff --git a/src/_images/guest_mode_setting.png b/src/_images/guest_mode_setting.png
diff --git a/src/_images/instance_settings_allowed_domains.png b/src/_images/instance_settings_allowed_domains.png
diff --git a/src/_images/plugin_component_config.png b/src/_images/plugin_component_config.png
diff --git a/src/_images/unallowed_domain.png b/src/_images/unallowed_domain.png
diff --git a/src/guides/domain_allowlist.md b/src/guides/domain_allowlist.md
@@ -0,0 +1,38 @@
+# Domain Allowlist
+
+For security, only defined domains can access the Caido API and interface.
+
+<img alt="Desktop Allowed Domains setting." src="/_images/unallowed_domain.png" center/>
+
+For instance, when utilizing a domain that resolves to `127.0.0.1` for [proxying local traffic](/guides/proxy_local.md), the domain must be added to the `Allowed Domains` list.
+
+## Desktop Application
+
+In the Caido desktop application, this list can be found within your Instance settings.
+
+<img alt="Desktop Allowed Domains setting." src="/_images/instance_settings_allowed_domains.png" center/>
+
+## CLI
+
+When using the Caido CLI, to add a domain to the allowlist, use `--ui-domain=` to specify the addition:
+
+```
+--ui-domain=example.com
+```
+
+## Docker
+
+To add a domain to the allowlist when running the Caido Docker image, you need to override the default command with:
+
+```
+docker run caido/caido caido-cli --no-renderer-sandbox --no-open --listen 0.0.0.0:8080 --ui-domain=example.com
+```
+
+Or you can override the Docker Compose:
+
+```
+services:
+  caido:
+    image: caido/caido
+    command: ["caido-cli", "--no-renderer-sandbox", "--no-open", "--listen", "0.0.0.0:8080", "--ui-domain", "example.com"]
+```
diff --git a/src/guides/guest_mode.md b/src/guides/guest_mode.md
@@ -0,0 +1,34 @@
+# Guest Mode
+
+::: warning
+In Guest mode, anybody can access your instance without authentication. This means that binding to 0.0.0.0 would, for example, allow anybody on the same network as you to use it and have full RCE on your machine.
+:::
+
+Caido can be used without an account in Guest Mode by selecting the `Continue as guest` option in the authentication prompt.
+
+<img alt="Guest Mode selection." src="/_images/guest_mode_selection.png" center/>
+
+Guest Mode is enabled by default in the desktop application via the `Allow guests` option within the `Advanced` dropdown selection in your Instance settings.
+
+<img alt="Guest Mode setting." src="/_images/guest_mode_setting.png" center/>
+
+Guest Mode is disabled by default in the Caido CLI, and must be explicitly enabled with the use of the `--allow-guests` option.
+
+## Guest Mode Limitations
+
+When using Caido in Guest Mode, there are certain limitations compared to an authenticated session:
+
+- No [Projects](/guides/projects.md) are saved.
+- All user settings are shared between all guests such as: Custom Developer Settings, [HTTPQL](/reference/httpql.md) queries, and [layout customization](/concepts/essentials/layout.md).
+
+::: info
+Shared Guest Mode settings are not shared with your account. This includes plugin component configurations. For instance, you will have to manually enable/disable the frontend/backend components.
+
+<img alt="Guest Mode plugin configuration." src="/_images/plugin_component_config.png" center/>
+:::
+
+- You are limited to a single plugin.
+
+::: tip
+[Register an account](https://dashboard.caido.io/signup) and use an authenticated session to gain the ability to save two Projects and utilize up to three plugins.
+:::
diff --git a/src/reference/cli.md b/src/reference/cli.md
@@ -0,0 +1,24 @@
+# CLI Options
+
+To view the options available to the Caido CLI, use `-h` or `--help`.
+
+``` txt
+Options:
+  -l, --listen <ADDR:PORT>                         Listening address
+      --invisible                                  Enable invisible mode for all listeners
+      --proxy-listen <ADDR:PORT>                   Proxy listening addresses
+      --ui-listen <ADDR:PORT>                      UI listening addresses
+      --ui-domain <UI_DOMAIN>                      Allowed domains for UI
+      --no-open                                    Do not open the UI a browser tab
+      --debug                                      Record and display debug logs
+      --reset-cache                                Reset the instance cache of cloud data
+      --reset-credentials                          Reset the instance credentials (DANGEROUS)
+      --data-path <DATA_PATH>                      Directory to store data
+      --no-logging                                 Disable file logging
+      --no-renderer-sandbox                        Disable sandboxing for the renderer
+      --import-ca-cert <IMPORT_CA_CERT>            Import CA certificate
+      --import-ca-cert-pass <IMPORT_CA_CERT_PASS>  Import CA certificate password
+      --allow-guests                               Allow login as guest
+  -h, --help                                       Print help (see more with '--help')
+  -V, --version                                    Print version
+```