Results

DAST

Trial setup guide

Get started deploying Burp Suite DAST.

PROFESSIONAL

Viewing insertion points

The Insertion points panel in the Audit items tab contains a list of all the insertion points for a request. This enables you to better understand how much ...

PROFESSIONAL COMMUNITY

Identifying supported HTTP methods with Burp Suite

Due to misconfiguration, some websites support additional HTTP methods that may be useful to an attacker in a number of ways. These include: Enabling you to ...

DAST

System requirements for a Kubernetes instance

You can deploy Burp Suite DAST to Kubernetes. We provide a Helm chart with the correct field values to meet the minimum system requirements. Note We ...

DAST

Integrating SCIM using Okta

Cloud Self-hosted In this section, we'll guide you through the process of integrating SCIM with Burp Suite DAST using Okta as your identity provider (IdP). ...

PROFESSIONAL COMMUNITY

Writing your first Burp Suite extension

This tutorial shows you how to write your first Burp Suite extension in Java using the Montoya API. You'll learn how to: Set your extension's name. Register ...

PROFESSIONAL

Creating AI extensions

The Montoya API enables you to add advanced AI features into your Burp Suite extensions. Your extensions can now send prompts to a Large Language Model ...

PROFESSIONAL

Best practices for writing AI custom actions

The Montoya API enables you to integrate AI-powered functionality into your custom actions. Follow these best practices to ensure your custom action is ...

DAST

Browser-powered scanning for Burp Suite DAST

Browser-powered scanning is an invaluable feature that unleashes the full capability of Burp Scanner. When browser-powered scanning is enabled, Burp Scanner ...

DAST

Setting the site scope

Cloud Self-hosted When scanning a web app, the site scope defines which URLs you want to scan, and which you don't want to scan. Burp Scanner only visits ...