Professional

AI features (Burp AI)

• Last updated: August 17, 2026

• Read time: 3 Minutes

Burp AI is a set of AI-powered features in Burp Suite Professional that helps you uncover vulnerabilities more efficiently, understand complex web technologies, and streamline authentication setup.

Burp AI features prioritize privacy and security, and none of them run unless you explicitly activate them. Using them requires AI credits. For more information, see AI credits.

Burp AI features

Burp AI includes the following features:

Burp AI in Repeater

Burp AI is built into Repeater, enabling you to run custom prompts against any tab. This flexible workflow gives you full control over what Burp AI examines, making it easy to tailor each task to your needs. For example, you can analyze a suspicious request, test for a specific vulnerability, or ask for suggestions on what to try next when you're unsure how to proceed.

Explore Issue

Explore Issue autonomously investigates vulnerabilities identified by Burp Scanner, saving you time and effort. It follows up on issues like a human pentester would - attempting exploits, identifying additional attack vectors, and summarizing findings so you can validate and demonstrate impact more efficiently.

Explainer

Explainer enables you to quickly understand unfamiliar technologies without leaving Burp Suite. Highlight any part of a Repeater message and click a button to get an AI-generated explanation. Explainer provides instant insights into headers, cookies, JavaScript functions, and more, to help you quickly identify potential security implications without disrupting your workflow.

Broken access control false positive reduction

False positives in automated security testing can waste valuable time. Burp enhances Broken Access Control scan checks by intelligently filtering out false positives before they're reported, helping to free up your time to focus on real threats.

AI-powered recorded logins

Configuring authentication for web apps can be time-consuming and error-prone. Burp can use AI to generate recorded login sequences automatically, saving time and eliminating the possibility of human error.

AI-powered extensions

The Montoya API enables you to add advanced AI features into your Burp Suite extensions. Your extensions can send prompts to an AI model, allowing for real-time input analysis and intelligent responses. There's no need for complex setup, such as managing API keys, as all AI interactions are handled within Burp Suite's secure AI infrastructure.

AI-powered custom actions in Burp Repeater

Burp Repeater supports custom actions enhanced with AI, enabling real-time, context-aware analysis of HTTP messages.

All AI interactions are handled within Burp Suite's secure AI infrastructure, so there's no need for complex setup, such as managing API keys.

When to use Burp AI

Use Burp AI when you want help with a specific task in a tool you're already working in, such as analyzing a request in Repeater, explaining an unfamiliar technology, or following up a single Scanner finding with Explore Issue. Each feature runs only when you invoke it, so you stay in control of what it examines and when.