Results

PROFESSIONAL DAST

BCheck definitions

BChecks are custom scan checks that you can create and import. Burp Scanner runs these checks in addition to its built-in scanning routine, helping you to ...

DAST

Network and firewall settings for self-hosted scanning machines

Cloud You need to configure your network and firewall to allow your self-hosted scanning machines to communicate with your Cloud instance of Burp Suite ...

DAST

Getting started with the GraphQL API

You can use the GraphQL API to integrate Burp Suite DAST with your own software or a third-party tool. This page explains some points you should be aware of ...

DAST

Restricting access to sites

Cloud Self-hosted You can use groups to restrict user access to certain parts of an organization's infrastructure. For example: Different people have ...

DAST

Network and firewall rule reference

Cloud Self-hosted To run scans in Burp Suite DAST, you need to allow inbound and outbound network access between your sites and scanning resources. The ...

PROFESSIONAL DAST

Browser-powered scanning

By default, Burp Scanner uses an embedded Chromium browser to navigate during both the crawl and audit phases of a scan. This enables it to accurately ...

DAST

Configuring a site-driven scan in Jenkins

To integrate Burp Suite DAST with Jenkins, we recommend using the site-driven scan option. In this section, we'll provide step-by-step instructions on the ...

DAST

Setting up a Cloud instance

Setup guide for a Cloud instance of Burp Suite DAST

DAST

Kubernetes architecture overview

The following diagram shows the core components of Burp Suite DAST and the connections between them. DAST server The DAST server is the main application ...

DAST

Configuring site and scan data settings

Cloud Self-hosted You can configure Burp Suite DAST to create new sites for API-generated scans. You can also change the criteria that identify issues as ...