Get the whitepaper, toolkits & remediation guides → http1mustdie.com

My account

Products Solutions Research Academy Support Company

Customers About Blog Careers Legal Contact Resellers

My account Customers About Blog Careers Legal Contact Resellers

Burp Suite DAST The enterprise-enabled dynamic web vulnerability scanner.

Burp Suite Professional The world's #1 web penetration testing toolkit.

Burp Suite Community Edition The best manual tools to start web security testing. View all product editions

Burp Scanner

Burp Suite's web vulnerability scanner

Burp Suite's web vulnerability scanner'

Attack surface visibility Improve security posture, prioritize manual testing, free up time. CI-driven scanning More proactive security - find and fix vulnerabilities earlier. Application security testing See how our software enables the world to secure the web. DevSecOps Catch critical bugs; ship more secure software, more quickly. Penetration testing Accelerate penetration testing - find more bugs, more quickly. Automated scanning Scale dynamic scanning. Reduce risk. Save time/money. Bug bounty hunting Level up your hacking and earn more bug bounties. Compliance Enhance security monitoring to comply with confidence.

View all solutions

Product comparison

What's the difference between Pro and Enterprise Edition?

Burp Suite Professional vs Burp Suite Enterprise Edition

Support Center Get help and advice from our experts on all things Burp. Documentation Tutorials and guides for Burp Suite. Get Started - Professional Get started with Burp Suite Professional. Get Started - Enterprise Get started with Burp Suite Enterprise Edition. User Forum Get your questions answered in the User Forum. Downloads Download the latest version of Burp Suite.

Visit the Support Center

Downloads

Download the latest version of Burp Suite.

The latest version of Burp Suite software for download

Product Support and Documentation

Support Center
Getting Started
Professional/Community Edition Burp Suite DAST
Latest Releases
Extend Burp
BApp Store Extensions BChecks
User Forum
Training

Back to setup guides

Burp Suite DAST

Burp Suite DAST: User guide
Managing users and permissions
Scanning web apps and APIs
Working with scans
Working with scan results
Managing scanning resources
Post-installation configuration
Integrating with CI/CD platforms
- CI-driven scans
- CI/CD plugins (legacy)
Integrating with issue tracking platforms
Integrating with Slack
Integrating with Splunk
Managing services
Managing updates
- Updating standard instances
- Updating Kubernetes instances
Extensions
Troubleshooting
- Cloud
- Self-hosted
  - Kubernetes instance
  - Standard instance
API documentation
Reference

DAST

Managing scanning pools

Last updated: August 22, 2025
Read time: 1 Minute

Cloud

self-hosted-lozenge

Self-hosted

You can use scanning pools to define which self-hosted scanning machines can scan certain sites.

To learn more about managing scanning pools, see:

Scanning pools for Cloud instances of Burp Suite DAST
Scanning pools for Self-hosted instances of Burp Suite DAST

Burp Suite

Web vulnerability scanner Burp Suite Editions Release Notes

Vulnerabilities

Cross-site scripting (XSS) SQL injection Cross-site request forgery XML external entity injection Directory traversal Server-side request forgery

Customers

Organizations Testers Developers

Company

About Careers Contact Legal Privacy Notice

Insights

Web Security Academy Blog Research

Follow us

© 2025 PortSwigger Ltd.