Public Release v0.0.3 Fresh launch! Actively testing and evolving — early feedback is welcome. Report an Issue →
THE SUB-MILLISECOND API CLIENT | .NET 10 • React 19 • Jint ES6

LOAD. AIM. API.

The high-velocity, offline-first API weapon. Sub-millisecond connection waterfalls, 100% Postman collection fidelity, built-in SSRF loopback shield, and native cross-platform binaries. Zero telemetry tracking.

$ docker run -d -p 5000:5000 ghcr.io/bulletapp/bullet:latest
< 300ms
Cold Start Speed
~65 MB
Memory Footprint
100%
Postman v2.1 Fidelity
0 KB
Cloud Data Leaked
⚡ LIVE BALLISTIC SIMULATOR

Test the Trigger Right in Your Browser

Experience the microsecond telemetry waterfall and instant response rendering of the .NET 10 ballistic engine.

BULLET Cockpit v0.0.3
GET
200 OK
Latency: 8.4 ms
Payload: 1.42 KB
MICROSECOND RESOLUTION

Stop Guessing Where Your Milliseconds Went.

Most API clients only show you an aggregate duration. If a request takes 140ms, was it slow DNS resolution, a sluggish TLS 1.3 handshake, congested network TCP, or slow backend database processing?

BULLET intercepts socket-level events via high-performance EventListener telemetry hooks inside the .NET 10 SocketsHttpHandler, recording every transition with nanosecond precision.

DNS Resolution
Tracks domain resolution duration and cached lookup times.
TLS Negotiation
Records cipher suite handshake and ALPN negotiation timings.
TTFB (First Byte)
Microsecond server processing latency before stream payload starts.
Content Transfer
Stream read throughput and complete byte transmission time.
BULLET Telemetry Waterfall
Actual In-App Telemetry Explorer Filter by > 50ms • Sort by Phase
THE BALLISTIC ARSENAL

Engineered for Velocity and Privacy

No bloated WebViews, no forced cloud accounts, no hidden telemetry snooping on your internal APIs.

Sub-ms Waterfall

Nanosecond-precision breakdown of DNS, TCP handshake, TLS negotiation, and TTFB using custom SocketsHttpHandler probes.

Zero Socket Guesswork

SSRF Loopback Fortress

Automatic shield blocking malicious redirection to private RFC1918 subnets (127.0.0.1, 10.0.0.0/8, 169.254.169.254 cloud metadata).

Enterprise Security Default

100% Postman v2.1 Import

Drag-and-drop Postman collections and environments directly. Pre-request scripts and Chai test assertions run natively in Jint ES6 isolate.

Seamless Zero-Friction Migration

Bulletproof TLS & mTLS

Manage client PKCS#12 (.p12/.pfx) certificates, corporate Root CAs, self-signed validation bypass, and custom SSL ciphers.

Full Zero-Trust Auth

Multi-Shot Batch Runner

Fire concurrent shots across collection folders. Real-time latency percentiles (p50, p95, p99) and CSV export for load verification.

Automated Pipeline Testing

Polyglot Code Generator

Generate production-ready code snippets with 1 click in cURL, Python, Node.js Fetch, Go, C#, Rust, PHP, Java, Ruby, and Swift.

10 Modern Languages

AES-256 Vault

Zero-knowledge local SQLite database with AES-256-GCM encryption for API keys, bearer tokens, and session cookies. No cloud leaks.

100% Offline-First Privacy

Native Everywhere

True native desktop binaries for Windows x64 and macOS (Apple Silicon & Intel x64), Docker containers for CI/CD, and offline PWA.

Zero Rosetta Overhead

gRPC Studio

Server Reflection auto-discovery, .proto schema parser, HTTP/2 binary framing execution, JSON message payloads, and trailers diagnostics.

HTTP/2 Dynamic Framing

Enterprise OAuth 2.0

Authorization Code (with PKCE S256), Client Credentials, Password, and Refresh Token grant flows with live token acquisition and auto-injection.

PKCE S256 & Token Lifecycle
HEAD-TO-HEAD MATRIX

Why Engineers are Switching to BULLET

Comparison between legacy tools and the .NET 10 ballistic architecture.

Capability BULLET Postman Insomnia Bruno
Cold Start Latency < 300 ms 8 – 15 s 6 – 10 s 2 – 4 s
RAM Footprint (Idle) ~65 MB 1.2 GB+ 800 MB+ 220 MB
Forced Cloud Account NEVER (100% Offline) Mandatory Mandatory None
Sub-ms Waterfall Telemetry Built-in (DNS, TCP, TLS, TTFB) Aggregate only Basic Basic
Postman v2.1 Script Fidelity Full (pm.test, Chai, Jint) Native Partial Custom syntax
Workspace & Collection Creation Unlimited Local (Zero Account) Locked behind Login Locked behind Account Local folder only
Collection Runner Limits 100% Unlimited (UI & CLI) 25 runs/mo paywall Unlimited (Local) Unlimited
Team Collaboration Serverless WiFi Mesh P2P Cloud Relay (Account) Cloud Relay (Account) Git repo only
Open Source & License MIT (100% Free) Proprietary Paid Tiers Freemium Cloud Open Core (Golden Edition $)
CROSS-PLATFORM DISTRIBUTION

Deploy BULLET on Any Machine

Native binaries for Windows & macOS, containerized Linux for servers, and standalone PWA for browser docks.

Windows 10 / 11 (x64)

Installer & Portable

Self-contained desktop application with native WebView2 runtime and microsecond SocketsHttpHandler.

Terminal Quick Run:
# Install via PowerShell One-Liner
Invoke-WebRequest -Uri "https://github.com/bulletapp/bullet/releases/download/v0.0.3/Bullet-Setup-v0.0.3.exe" -OutFile "Bullet-Setup.exe"; .\Bullet-Setup.exe
Open Source Security & Code Signing Note: BULLET is 100% open source under the MIT License. On Windows, click More info → Run anyway if SmartScreen prompts. On macOS, run xattr -cr Bullet.app to clear Gatekeeper quarantine.
CODE GENERATION

One-Click Production Code

Export any request into your favorite language with headers, auth, and payload ready to copy.

Generated Client Snippet
curl -X POST "https://api.bullet.dev/v1/bullets/fire" \
  -H "Content-Type: application/json" \
  -H "Authorization: Bearer bullet_secret_token" \
  -d '{"caliber": "5.56 NATO", "target": "api.production"}'
HIGH-THROUGHPUT ARCHITECTURE

Decoupled Ballistic Core

Built from the ground up for maximum throughput, isolation, and safety.

Presentation Layer

React 19 + Tailwind

Ultra-responsive modern UI compiled to static assets. Supports real-time SignalR duplex streams, virtualized logs, and dark/light themes.

Native WebView2 & Safari WebKit
Engine Core

.NET 10 Kestrel Host

High-performance non-blocking async pipeline. Handles SocketsHttpHandler microsecond connection telemetry and SSRF loopback defense.

Low-latency Socket Hooks
Sandbox & Vault

Jint ES6 & SQLite AES-256

Isolated JavaScript execution for Chai assertions and pre-request scripts. Secrets stored in zero-knowledge AES-256 encrypted SQLite vault.

Zero Cloud Data Transmission
ENGINEERING DOCUMENTATION

Explore the Technical Specifications

Read the deep-dive architectural specifications, CLI guides, and scripting references.

Bullet Icon

Upgrade Your API Weapon Today

No cloud login required. Free, open source, and built for developers who care about speed and privacy.