DAST

Burp AT in Burp Suite enterprise platform

• Last updated: November 5, 2026

• Read time: 2 Minutes

Burp AT runs AI-driven security tests, called agentic tests, against the sites in your Burp Suite enterprise platform instance.

Availability

You buy Burp AT separately. It is available for Cloud instances only. If Burp AT is not available on your instance, contact your PortSwigger account team.

What an agentic test does

You select a site, and Burp AT tests it for you. Burp AT uses the scope and authentication settings of the site. You can also give Burp AT background context about the site.

In a User-guided AI test, you set the objective in the chat after you create the test. In a Full AI autonomy test, you can give an objective when you create the test.

Burp AT reports the issues and URLs that it discovers as it works.

Levels of autonomy

When you create an agentic test, you select how much control you keep:

• User-guided AI: Burp AT pauses for your approval before a risky or destructive step. You stay involved while it runs.
• Full AI autonomy: Burp AT runs from start to finish without pausing. You schedule the test and review the results later.

Next steps with Burp AT

• To create and run a test, see Running your first agentic test.
• To review, stop and delete tests, see Managing agentic tests.
• To control who can use Burp AT, see Managing access to Burp AT.