---
id: 224
title: "Functional PoCs in less than a minute? Julen Garrido Estévez puts Burp AI to the test"
source_domain: portswigger.net
source_url: "https://portswigger.net/blog/functional-pocs-in-less-than-a-minute"
published_at: "2026-01-16 00:00"
tags: ["ai-security", "sql-injection", "poc", "portswigger", "burp-ai", "pentest", "prompt-engineering"]
phying_url: "https://phying.com/item/224"
lang: en
---

# Functional PoCs in less than a minute? Julen Garrido Estévez puts Burp AI to the test

## Summary

Pentester Julen Garrido Estévez systematically benchmarks Burp AI on Web Security Academy labs, comparing prompt styles and measuring time-to-PoC, cost, and hallucination rates.

## Intelligence Metadata

- **Sources:** portswigger.net
- **Published:** 2026-01-16 00:00
- **Original:** https://portswigger.net/blog/functional-pocs-in-less-than-a-minute
- **Phying News:** https://phying.com/item/224