Finch is a lightweight reverse proxy that inspects TLS and HTTP traffic to extract JA3, JA4, JA4H and Akamai HTTP/2 fingerprints. It uses hot-reloadable HCL rules to evaluate requests and can allow, deny, route, or even deceive attackers with LLM-generated responses!

Finch outsmarts bad traffic—blocking noise with high-fidelity fingerprints, tarpitting scanners, and dynamically deceiving attackers.