PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Welcome to the next generation of Burp Suite: elevate your testing with Burp AI

portswigger.net | blog | #ai-security | #product-launch | #false-positives | #burp-ai | #burp-suite-professional | #montoya-api | #explore-issue
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Burp Suite Professional 2025.2 introduces Burp AI with five features: Explore Issue, Explainer, AI-generated recorded logins, access control false positive reduction and AI-powered extensibility.
Published
Collected

Related coverage

blog · portswigger.net
Two months of Burp AI: empowering security testers with the future of AppSec
Two months after launch, a look back at Burp AI's five features - Explore Issue, Explainer, AI recorded logins, false positive reduction and AI extensibility - and early community adoption.
blog · portswigger.net
Elevate your testing with Burp AI: watch Clint Gibler’s exclusive interview with PortSwigger’s Dafydd Stuttard and James Kettle
Clint Gibler interviews Dafydd Stuttard and James Kettle on Burp AI, featuring live demos of Explore Issue autonomously building a SQL injection PoC and the Shadow Repeater extension.
blog · portswigger.net
What's new in Burp Suite Professional: A year of innovation
A roundup of a year of Burp Suite Professional updates: major performance improvements, expanded Bambdas scripting capabilities, Burp AI launch, and workflow enhancements across the toolkit.
blog · portswigger.net
How I sped up exploit validation in Repeater using Burp AI
Guest post by security consultant Adarsh Kumar on using Burp AI inside Repeater to speed up exploit validation, walking through an IDOR assessment on a multi-tenant SaaS REST API.
blog · portswigger.net
Functional PoCs in less than a minute? Julen Garrido Estévez puts Burp AI to the test
Pentester Julen Garrido Estévez systematically benchmarks Burp AI on Web Security Academy labs, comparing prompt styles and measuring time-to-PoC, cost, and hallucination rates.
blog · portswigger.net
Burp On Tour 2025: bringing the AppSec community together around the world
A retrospective of Burp On Tour 2025, recapping PortSwigger's global community outreach, James Kettle's HTTP/1.1 Must Die research debut, and new agentic AI capabilities in Burp Suite.
Back