DAST

Managing issues in Burp Suite DAST

  • Last updated: August 3, 2026

  • Read time: 2 Minutes

After a scan, you can manage the issues that Burp Suite DAST finds. You can:

  • Set an issue's status, such as false positive or accepted risk.
  • Add comments to issues.
  • Edit the severity of an issue.
  • Update many issues at once.

Setting an issue status

After reviewing an issue you can set a status for it, such as False positive or Accepted risk. If you and the scanner set different statuses, Burp Suite DAST shows the status you set, unless the scanner confirms the issue is fixed. For more information, see Issue statuses.

To set an issue's status:

  1. Go to the Issues tab.
  2. Select an issue to open it.
  3. From the Status drop-down, select one of the following:

    • False positive
    • Accepted risk
    • Verified risk
    • Fixed (unconfirmed)
    • Use scanner status - clears a status you have set and returns the issue to its scanner status.
  4. (Optional) Add a note.
  5. Click Change issue status.

Burp Suite DAST records the change in the issue's timeline, along with the time, date, and your username.

Note

Issues marked as False positive are moved to the bottom of the Issues tab and excluded from dashboard statistics and charts. Issues marked as False positive or Accepted risk do not cause CI/CD pipeline builds to fail.

Adding a comment to an issue

Add comments to record your decisions and share context with your team. Comments appear in the issue's timeline.

To add a comment:

  1. Select an issue to open it.
  2. Select the Timeline tab.
  3. Enter your comment.
  4. Click Add comment.

Editing issue severity

Editing the severity of an issue can be useful if the real-world impact it poses is different from how Burp has rated it.

To edit the severity of an issue:

  1. Go to the Issues tab.
  2. Select an issue to open it.
  3. From the Severity drop-down, select a severity.
  4. (Optional) Add a note.
  5. Click Change issue severity.

Burp Suite DAST records the change in the issue's timeline, along with the time, date, and your username.

Updating issues in bulk

You can update many issues in a single action, across different sites and applications.

To update issues in bulk:

  1. Go to the Issues tab.
  2. Select the issues you want to update.
  3. Click Change status or Change severity, then select the new value.

You cannot add a note to a bulk change.

You can also change an issue's status directly from the issue list, without opening the issue.