Burp AI capabilities

Burp AI introduces a number of AI-powered capabilities designed to accelerate your workflow, reduce human error, and help you focus on the tasks that require your human expertise and intuition.

Explainer: Instant AI-powered insights

No more context-switching - get AI-powered, security-focused insights, directly in Burp Repeater.

Quickly research unfamiliar HTTP headers, cookies, and other data and their potential security implications.

Ask Burp AI to explain client-side JavaScript to you, so you can quickly understand what the code is doing, and whether it warrants deeper manual investigation, without having to decipher it line-by-line.

Eliminate the need to switch between Burp and external information sources to look things up.

Explore issue: Automated vulnerability analysis

By outsourcing some of the issue analysis to AI, you can choose to focus your time and effort where you feel it's most valuable.

Burp AI attempts to leverage the vulnerability to exfiltrate sensitive data, reach additional attack surface, and identify escalation paths, automatically generating PoCs on your behalf.

Burp AI provides step-by-step insights into what it's attempting at each stage, along with an executive summary of the findings so far. You can intervene at any point, whether it's to take over manually or simply because you feel the issue has been explored sufficiently.

AI-powered false positive reduction

Testing for access control vulnerabilities is repetitive and tedious, but has traditionally proved challenging to automate reliably. Using AI-powered false positive reduction, Burp Scanner can now detect broken access controls with significantly more accuracy.

Spend less time chasing dead ends and focus on investigating real vulnerabilities.

Burp AI helps validate access control issues before they're reported, ensuring you don't get distracted by an overwhelming to-do list of irrelevant findings.

AI-generated login sequences

Instantly generate recorded login sequences instead of manually navigating login flows in the browser.

Avoid common pitfalls of manual recording, such as missed interactions or unrecognized input methods, ensuring successful authentication during scans. Ensure Burp Suite can reliably access and scan authenticated areas, reducing blind spots in your security assessments.

Burp AI FAQs

Is Burp AI replacing pentesters?

No. Burp AI enhances efficiency but does not replace human expertise.

Will AI leak my sensitive data?

No. Your data stays within PortSwigger’s secure AI platform and is never stored by the AI service provider or used for model training purposes.

Can I disable AI?

Yes. AI features can be fully disabled from Burp Suite’s settings.

Can I use Burp AI offline?

Not currently, but we may explore local model options based on demand.

Join the official PortSwigger Community

Connect with the people behind Burp Suite, ask questions, share insights and get advice from experts.

Gain access to members-only events, including live demos, deep dives and Q&A sessions with our developers and security researchers.

Be the first to see what's coming next - get sneak peeks of upcoming features, new tools and other exciting updates exclusive to the PortSwigger Discord.