PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Burp Suite Enterprise Edition beta now available

portswigger.net | blog | #ci-cd | #rbac | #scanning | #burp-suite-enterprise-edition | #launch | #beta | #pricing
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Burp Suite Enterprise Edition 1.0 beta debuts with a scalable server and distributed agent pool, scheduled and on-demand scanning, role-based access control and CI/CD integration, priced per agent.
Published
Collected

Related coverage

blog · portswigger.net
Burp extensions added to Burp Suite Enterprise Edition
Burp Suite Enterprise Edition 2021.8 adds support for BApp and custom extensions. Extensions are downloaded from the BApp Store and assigned per site, with permissions managed via RBAC.
blog · portswigger.net
Simplified cloud deployment for Burp Suite Enterprise Edition
Burp Suite Enterprise Edition 2021.3.1 simplifies cloud deployments: nested AWS CloudFormation templates, RBAC replacing hard-coded access keys, and optional PostgreSQL database provisioning.
blog · portswigger.net
Enterprise Edition: configuring your team
Burp Suite Enterprise Edition supports multi-user access with role-based access control, predefined roles and groups, and site-restricted groups that enforce horizontal segregation of privileges.
blog · portswigger.net
Enterprise Edition: performing scans
Burp Suite Enterprise Edition scans multiple sites in parallel, on demand or on a schedule. The article walks through configuring scan runs, reviewing progress and drilling into reported issues.
blog · portswigger.net
Find GraphQL API vulnerabilities, with Burp Suite Professional
Burp Suite Professional adds GraphQL scan checks that find known and hidden endpoints, detect enabled introspection and Apollo suggestions, and flag endpoints that fail to validate content types.
blog · portswigger.net
BChecks: Houston, we have a solution!
PortSwigger launches BChecks in beta for Burp Suite Professional, a scripting language with conditional logic, regex, raw HTTP requests, and Collaborator support for custom scan checks.
Back