{"AdditionalData":null,"IsHtmlResultSet":false,"Messages":{"Details":[],"Summary":{"Title":"Success","Type":1,"Value":""}},"ResultSet":{"HasMoreResults":true,"PageNumber":1,"PageSize":10,"Results":[{"builds":[{"Md5Checksum":"773c30998a7423fefde6abba6e43bd90","BuildCategoryEdition":"Burp Suite DAST","BuildCategoryId":"dast","BuildCategoryPlatform":"Kubernetes","BuildCategoryPlatformLabel":"Helm chart","Sha256Checksum":"61482c39c81618d2f78fe7a29184c63dedf18a4c68757f665ac2fc0574258f55","Version":"2026.10.2","EulaUrl":"/burp/eula/dast"},{"Md5Checksum":"321cedebef53f15ea23c6cd839a96ddc","BuildCategoryEdition":"Burp Suite DAST","BuildCategoryId":"dast","BuildCategoryPlatform":"Linux","BuildCategoryPlatformLabel":"Linux installer (x64)","Sha256Checksum":"abd771deab7ea37eaac40103286ffbec042f8f35fe0d73b52598971b2a81d03b","Version":"2026.10.2","EulaUrl":"/burp/eula/dast"},{"Md5Checksum":"643811b44fe19348aa2a8e797c002c1d","BuildCategoryEdition":"Burp Suite DAST","BuildCategoryId":"dast","BuildCategoryPlatform":"Updater","BuildCategoryPlatformLabel":"Server component updater","Sha256Checksum":"cf32305f570f80115bc28ee7f66428edc8ab5e4a0f8842c7ba3ee9d2b3a8f4e2","Version":"2026.10.2","EulaUrl":"/burp/eula/dast"},{"Md5Checksum":"67d7c35e67463a7056fc398595c386d6","BuildCategoryEdition":"Burp Suite DAST","BuildCategoryId":"dast","BuildCategoryPlatform":"WindowsX64","BuildCategoryPlatformLabel":"Windows installer (x64)","Sha256Checksum":"4ba06c7c0ee6a229d6f1ea9dec1c36d548f8e76dc90f1461ebb3e1fccc2b7e6c","Version":"2026.10.2","EulaUrl":"/burp/eula/dast"},{"Md5Checksum":"ba2e51c8aaf49851204305618f9e0bc3","BuildCategoryEdition":"dast","BuildCategoryId":"dast_agent","BuildCategoryPlatform":"AgentUpdate","BuildCategoryPlatformLabel":"Scanner component updater","Sha256Checksum":"d027e89265f4f90f86d77b54990f9b137b18bb85204a38e87e931c3d6d42591f","Version":"2026.10.54867","EulaUrl":"/burp/eula/dast_agent"}],"categories":["DAST"],"content":"\u003cp\u003eThis release adds ServiceNow ticketing, expands API scan coverage, and helps scans run more reliably with less memory.\u003c/p\u003e\u000d\u000a\u003ch2\u003eTrack security issues in ServiceNow\u003c/h2\u003e\u000d\u000a\u003cp\u003eConnect Burp Suite DAST to ServiceNow to raise tickets directly from issues, link issues to existing tickets, or automate ticket creation based on severity, confidence, and site. Actions let you choose the destination table and ticket fields, with required fields read from ServiceNow.\u003c/p\u003e\u000d\u000a\u003cp\u003eTrack ticket status and priority from each issue, and see linked tickets in the \u003cstrong\u003eLinked tickets\u003c/strong\u003e column. If automatic ticket creation fails, the issue and connection show the reason. You can set up multiple connections using a username and password or OAuth client credentials.\u003c/p\u003e\u000d\u000a\u003ch2\u003eScan more of your SOAP APIs\u003c/h2\u003e\u000d\u000a\u003cp\u003eBurp Suite DAST now scans more operations and inputs defined in WSDL files. It builds requests in the format your SOAP service expects, helping scan payloads reach the application.\u003c/p\u003e\u000d\u000a\u003cp\u003eCoverage now includes nested values, inherited fields, XML attributes, SOAP headers, and operations that use common XML Schema types such as 64-bit integers, URIs, and durations. Allowed values, defaults, and limits from the WSDL are offered as parameter values. Existing SOAP sites retain their stored endpoints and settings.\u003c/p\u003e\u000d\u000a\u003ch2\u003eOther improvements\u003c/h2\u003e\u000d\u000a\u003cp\u003eWe made the following improvements:\u003c/p\u003e\u000d\u000a\u003cul\u003e  \u003cli\u003e\u003cstrong\u003eReuse site settings.\u003c/strong\u003e Copy settings from an existing site when creating a new one.\u003c/li\u003e  \u003cli\u003e\u003cstrong\u003eReview issue evidence in one place.\u003c/strong\u003e Requests, responses, and other evidence now appear in a single \u003cstrong\u003eEvidence\u003c/strong\u003e tab.\u003c/li\u003e  \u003cli\u003e\u003cstrong\u003ePrevent scope rules that include every host.\u003c/strong\u003e Advanced scope now rejects these in-scope rules. Scans for sites with an existing rule fail with a message explaining how to fix it.\u003c/li\u003e  \u003cli\u003e\u003cstrong\u003eRun scans with less memory.\u003c/strong\u003e Scans reduce active workers under memory pressure, handle requests that run out of memory without freezing, and produce smaller project files.\u003c/li\u003e\u003c/ul\u003e\u003ch2\u003eJava update\u003c/h2\u003e\u003cp\u003eWe updated Java Runtime to 21.0.13 and Azul Zulu to 21.54.107.\u003c/p\u003e\u000d\u000a\u003ch2\u003eBug fixes\u003c/h2\u003e\u000d\u000a\u003cp\u003eWe fixed the following bugs:\u003c/p\u003e\u000d\u000a\u003cul\u003e  \u003cli\u003eDynamic authentication no longer includes quotation marks when sending a token returned as a bare JSON string.\u003c/li\u003e  \u003cli\u003eResponses with \u003ccode\u003enosniff\u003c/code\u003e and no content type are no longer reported as exploitable cross-site scripting.\u003c/li\u003e  \u003cli\u003eA failed crawl no longer discards the audit of content already crawled.\u003c/li\u003e  \u003cli\u003eThe audit phase no longer stalls if closing a browser tab fails.\u003c/li\u003e  \u003cli\u003eAuto-throttle now backs off as intended.\u003c/li\u003e  \u003cli\u003eBrowser failures caused by low memory are now reported as low-memory errors.\u003c/li\u003e  \u003cli\u003eChecks that send no payloads no longer incorrectly attribute the problem to the scan configuration.\u003c/li\u003e  \u003cli\u003eScans that previously displayed an error when opened in the user interface now load correctly.\u003c/li\u003e\u003c/ul\u003e","id":4981,"labels":[],"buildCategory":"dast","releaseChannels":["Stable"],"releaseDate":"Released Tuesday 27 October 2026","title":"DAST 2026.10.2","url":"/burp/releases/dast-2026-10-2","version":"2026.10.2"},{"builds":[{"Md5Checksum":"f58d9ff9108f751f825217c9877cd124","BuildCategoryEdition":"Burp Suite Desktop","BuildCategoryId":"desktop","BuildCategoryPlatform":"AgentUpdate","BuildCategoryPlatformLabel":"Scanner component updater","Sha256Checksum":"ce2660f585ccfd6dca2008f928b4a0a09e4de1b3a7abf8749cabb6250511d0c9","Version":"2026.10.1","EulaUrl":"/burp/eula"},{"Md5Checksum":"989be037f018dd745237c1d4ac5b3184","BuildCategoryEdition":"Burp Suite Desktop","BuildCategoryId":"desktop","BuildCategoryPlatform":"Jar","BuildCategoryPlatformLabel":"JAR","Sha256Checksum":"e8ab086537b1643b91ca09d2fc2a6c3e08a8bae0c85280797c5c9ec76506c3c5","Version":"2026.10.1","EulaUrl":"/burp/eula"},{"Md5Checksum":"9f528745067e465f60cc945b9edbaf71","BuildCategoryEdition":"Burp Suite Desktop","BuildCategoryId":"desktop","BuildCategoryPlatform":"Linux","BuildCategoryPlatformLabel":"Linux (x64)","Sha256Checksum":"77ab3568ce83a993362be7c6bd0726e612a7af36e0ad323d6995c9e65d714936","Version":"2026.10.1","EulaUrl":"/burp/eula"},{"Md5Checksum":"b7e242bdf2a681e5a34f1728023fa95b","BuildCategoryEdition":"Burp Suite Desktop","BuildCategoryId":"desktop","BuildCategoryPlatform":"LinuxArm64","BuildCategoryPlatformLabel":"Linux (ARM)","Sha256Checksum":"1d8995cf82ca045c4f585a9cebaf3d18f4a073557a0fe05276d4cf6c69fa7478","Version":"2026.10.1","EulaUrl":"/burp/eula"},{"Md5Checksum":"e8a4942ed8ed4e06e126e22086987ca1","BuildCategoryEdition":"Burp Suite Desktop","BuildCategoryId":"desktop","BuildCategoryPlatform":"MacOsArm64","BuildCategoryPlatformLabel":"macOS (Apple silicon)","Sha256Checksum":"77a343a0e8ac80784382f33c54ce8c0516618ad7d92a97eb6e014b57d8f2f07d","Version":"2026.10.1","EulaUrl":"/burp/eula"},{"Md5Checksum":"65a20a5a28da4b35b0cc6686d4b6a9d1","BuildCategoryEdition":"Burp Suite Desktop","BuildCategoryId":"desktop","BuildCategoryPlatform":"MacOsx","BuildCategoryPlatformLabel":"macOS (Intel)","Sha256Checksum":"28dcf9d4a929b510ae65c6cf17387b0de8149f2d01ff36b8dcc0759ca305a7d3","Version":"2026.10.1","EulaUrl":"/burp/eula"},{"Md5Checksum":"b8940e42d8bdd5a8f086d1033a964ac9","BuildCategoryEdition":"Burp Suite Desktop","BuildCategoryId":"desktop","BuildCategoryPlatform":"WindowsArm64","BuildCategoryPlatformLabel":"Windows (ARM)","Sha256Checksum":"7cce6967508f7c6e9ed29a786f274cdd98a742acecc4481acdc0fba707240961","Version":"2026.10.1","EulaUrl":"/burp/eula"},{"Md5Checksum":"b48a7e5f34b54bd3c0ad4a000a70c073","BuildCategoryEdition":"Burp Suite Desktop","BuildCategoryId":"desktop","BuildCategoryPlatform":"WindowsX64","BuildCategoryPlatformLabel":"Windows (x64)","Sha256Checksum":"793e42d920e14eff09e5aa438d21076970f306e1a15b6a3752184a374c91f206","Version":"2026.10.1","EulaUrl":"/burp/eula"}],"categories":["Desktop"],"content":"\u003cp\u003eThis release enables you to send requests and responses to Burp AT from more Burp tools, making it easier to bring evidence from your manual testing into a task. We\u0027ve also fixed an issue that caused Burp\u0027s browser to close unexpectedly and upgraded Chromium.\u003c/p\u003e\u000d\u000a\u000d\u000a\u003ch2\u003eSend context from more Burp tools\u003c/h2\u003e\u003cp\u003eYou can now send requests and responses to Burp AT from Repeater, Intruder, Logger, Organizer, Burp Search results, and messages sent by Burp Scanner. This makes it easier for you to bring evidence from your manual testing into a Burp AT task.\u003c/p\u003e\u000d\u000a\u003cp\u003eTo share an item, right-click it and select \u003cstrong\u003eSend to Burp AT\u003c/strong\u003e.\u003c/p\u003e\u000d\u000a\u003cp\u003eFor more information on using context items that have been sent to Burp AT, see \u003ca href=\u0022https://portswigger.net/burp/documentation/desktop/burp-at/tasks\u0023attaching-resources-and-files\u0022\u003eTasks\u003c/a\u003e.\u003c/p\u003e\u000d\u000a\u003ch2\u003eBug fix\u003c/h2\u003e\u003cp\u003eWe\u0027ve fixed an issue with Burp\u0027s browser that caused the browser to close unexpectedly.\u003c/p\u003e\u000d\u000a\u000d\u000a\u003ch2\u003eBrowser upgrade\u003c/h2\u003e\u003cp\u003eWe\u0027ve upgraded Burp\u0027s browser to Chromium 156.0.8078.48 for Windows & Mac and 156.0.8078.47 for Linux. For more information, see the \u003ca href=\u0022https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html\u0022\u003eChromium release notes\u003c/a\u003e.\u003c/p\u003e","id":4983,"labels":[],"buildCategory":"desktop","releaseChannels":["Stable"],"releaseDate":"Released Monday 26 October 2026","title":"Professional / Community 2026.10.1","url":"/burp/releases/professional-community-2026-10-1","version":"2026.10.1"},{"builds":[{"Md5Checksum":"be3f4ba70d55a800f0f0fe4bb033a9ec","BuildCategoryEdition":"Burp Suite Desktop","BuildCategoryId":"desktop","BuildCategoryPlatform":"AgentUpdate","BuildCategoryPlatformLabel":"Scanner component updater","Sha256Checksum":"1aa1589621bfbdfa4165a6f9b07e2e8ef9be7fef95b7e918d9ecae2f48d64b3b","Version":"2026.9.3","EulaUrl":"/burp/eula"},{"Md5Checksum":"0b9c7f07f19a9fbf717729668b26eb7b","BuildCategoryEdition":"Burp Suite Desktop","BuildCategoryId":"desktop","BuildCategoryPlatform":"Jar","BuildCategoryPlatformLabel":"JAR","Sha256Checksum":"f74c6dc152ef97e581374ecead54e13f505b251b2801891d7279de1430907e15","Version":"2026.9.3","EulaUrl":"/burp/eula"},{"Md5Checksum":"6519005a5fb89bc89532409027c7af6c","BuildCategoryEdition":"Burp Suite Desktop","BuildCategoryId":"desktop","BuildCategoryPlatform":"Linux","BuildCategoryPlatformLabel":"Linux (x64)","Sha256Checksum":"0294e75f1ba43e608c984ca3c0f06bab33cac44dac5eab11b577fa6bb5a427c8","Version":"2026.9.3","EulaUrl":"/burp/eula"},{"Md5Checksum":"8b86a06714006df60c2251cb9acc8351","BuildCategoryEdition":"Burp Suite Desktop","BuildCategoryId":"desktop","BuildCategoryPlatform":"LinuxArm64","BuildCategoryPlatformLabel":"Linux (ARM)","Sha256Checksum":"c869f58cc25575582e0e9ce59fd93b0ffdd1d707502508a521299aa57d98f5f2","Version":"2026.9.3","EulaUrl":"/burp/eula"},{"Md5Checksum":"b599e15211f3ea8477d74558c75f7991","BuildCategoryEdition":"Burp Suite Desktop","BuildCategoryId":"desktop","BuildCategoryPlatform":"MacOsArm64","BuildCategoryPlatformLabel":"macOS (Apple silicon)","Sha256Checksum":"88bd928ee70f1488ab87d16b77ccacc6d35af27535460162f2e1b77afe5ee730","Version":"2026.9.3","EulaUrl":"/burp/eula"},{"Md5Checksum":"74df83c99a31d0b5d9c4e121014fd28a","BuildCategoryEdition":"Burp Suite Desktop","BuildCategoryId":"desktop","BuildCategoryPlatform":"MacOsx","BuildCategoryPlatformLabel":"macOS (Intel)","Sha256Checksum":"5166f1b271282be95277dd207273effca437fa49d0ae19a9a95603e5691f86a8","Version":"2026.9.3","EulaUrl":"/burp/eula"},{"Md5Checksum":"0a83cf012a6a691b50411eef30306a7e","BuildCategoryEdition":"Burp Suite Desktop","BuildCategoryId":"desktop","BuildCategoryPlatform":"WindowsArm64","BuildCategoryPlatformLabel":"Windows (ARM)","Sha256Checksum":"89a521fb6c4480401a51ee0d023f3af322b24661a80ff9142f5f73bf48dc13b4","Version":"2026.9.3","EulaUrl":"/burp/eula"},{"Md5Checksum":"f1b4ef2fcdd9fb55023af17199097b25","BuildCategoryEdition":"Burp Suite Desktop","BuildCategoryId":"desktop","BuildCategoryPlatform":"WindowsX64","BuildCategoryPlatformLabel":"Windows (x64)","Sha256Checksum":"d723522947c8c81233fccc3ca22fd867073334d5a2fe3a943ebd56276f6e4c56","Version":"2026.9.3","EulaUrl":"/burp/eula"}],"categories":["Desktop"],"content":"\u003cp\u003eThis release enables you to send requests and responses to Burp AT from more Burp tools, making it easier to bring evidence from your manual testing into a task. We\u0027ve also fixed an issue that caused Burp\u0027s browser to close unexpectedly and upgraded Chromium.\u003c/p\u003e\u000d\u000a\u000d\u000a\u003ch2\u003eSend context from more Burp tools\u003c/h2\u003e\u003cp\u003eYou can now send requests and responses to Burp AT from Repeater, Intruder, Logger, Organizer, Burp Search results, and messages sent by Burp Scanner. This makes it easier for you to bring evidence from your manual testing into a Burp AT task.\u003c/p\u003e\u000d\u000a\u003cp\u003eTo share an item, right-click it and select \u003cstrong\u003eSend to Burp AT\u003c/strong\u003e.\u003c/p\u003e\u000d\u000a\u003cp\u003eFor more information on using context items that have been sent to Burp AT, see \u003ca href=\u0022https://portswigger.net/burp/documentation/desktop/burp-at/tasks\u0023attaching-resources-and-files\u0022\u003eTasks\u003c/a\u003e.\u003c/p\u003e\u000d\u000a\u003ch2\u003eBug fix\u003c/h2\u003e\u003cp\u003eWe\u0027ve fixed an issue with Burp\u0027s browser that caused the browser to close unexpectedly.\u003c/p\u003e\u000d\u000a\u000d\u000a\u003ch2\u003eBrowser upgrade\u003c/h2\u003e\u003cp\u003eWe\u0027ve upgraded Burp\u0027s browser to Chromium 156.0.8078.48 for Windows & Mac and 156.0.8078.47 for Linux. For more information, see the \u003ca href=\u0022https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html\u0022\u003eChromium release notes\u003c/a\u003e.\u003c/p\u003e","id":4984,"labels":[],"buildCategory":"desktop","releaseChannels":["Stable"],"releaseDate":"Released Monday 26 October 2026","title":"Professional / Community 2026.9.3","url":"/burp/releases/professional-community-2026-9-3","version":"2026.9.3"},{"builds":[{"Md5Checksum":"7aa85957210a5962416a33154908ce58","BuildCategoryEdition":"Burp Suite Desktop","BuildCategoryId":"desktop","BuildCategoryPlatform":"AgentUpdate","BuildCategoryPlatformLabel":"Scanner component updater","Sha256Checksum":"8a661a03a75e2827f78b4e0dc8ac1980280d6410b70795a33748d8157dde1f6b","Version":"2026.10","EulaUrl":"/burp/eula"},{"Md5Checksum":"9aec215db513b12c6c38bd1c9dc7cd75","BuildCategoryEdition":"Burp Suite Desktop","BuildCategoryId":"desktop","BuildCategoryPlatform":"Jar","BuildCategoryPlatformLabel":"JAR","Sha256Checksum":"a43a499aef4b464fd2769e503712160dad9f4ebf0caf7145a99b12aa0350213a","Version":"2026.10","EulaUrl":"/burp/eula"},{"Md5Checksum":"896671027c07fa25c583c2c25ca96faa","BuildCategoryEdition":"Burp Suite Desktop","BuildCategoryId":"desktop","BuildCategoryPlatform":"Linux","BuildCategoryPlatformLabel":"Linux (x64)","Sha256Checksum":"b43f0f80e4c9521b330100920f441cba3a637b0bf3e064f223199f2ee295c9d3","Version":"2026.10","EulaUrl":"/burp/eula"},{"Md5Checksum":"51dcf17653a771ab0cb6eff5afd4bd2d","BuildCategoryEdition":"Burp Suite Desktop","BuildCategoryId":"desktop","BuildCategoryPlatform":"LinuxArm64","BuildCategoryPlatformLabel":"Linux (ARM)","Sha256Checksum":"b7aef9806c227f07771d31ed9665c6dbf90af8ff81683f489298fbb0c50e90b3","Version":"2026.10","EulaUrl":"/burp/eula"},{"Md5Checksum":"e06c9d564e6feaa75af78bdafeca5925","BuildCategoryEdition":"Burp Suite Desktop","BuildCategoryId":"desktop","BuildCategoryPlatform":"MacOsArm64","BuildCategoryPlatformLabel":"macOS (Apple silicon)","Sha256Checksum":"dc2fe688e0f37dfe153859b991e3aceb2e83c1e82bb3db861e1e5135b8d097fa","Version":"2026.10","EulaUrl":"/burp/eula"},{"Md5Checksum":"e88afc741711ce427fe3283c1b6ac83f","BuildCategoryEdition":"Burp Suite Desktop","BuildCategoryId":"desktop","BuildCategoryPlatform":"MacOsx","BuildCategoryPlatformLabel":"macOS (Intel)","Sha256Checksum":"6c72b24d74d648f871a7ed654905b7d3bb572c039eb6002dd0673ee1e1247866","Version":"2026.10","EulaUrl":"/burp/eula"},{"Md5Checksum":"bc816b50a2fefa5e33852aaa6a5ddf60","BuildCategoryEdition":"Burp Suite Desktop","BuildCategoryId":"desktop","BuildCategoryPlatform":"WindowsArm64","BuildCategoryPlatformLabel":"Windows (ARM)","Sha256Checksum":"92d17bfc2bb5bab99eb9325a24b3ae5df6c1974d3d48c53478c73682efc62bd9","Version":"2026.10","EulaUrl":"/burp/eula"},{"Md5Checksum":"6398eeab097ee692e31ac72f142d05a4","BuildCategoryEdition":"Burp Suite Desktop","BuildCategoryId":"desktop","BuildCategoryPlatform":"WindowsX64","BuildCategoryPlatformLabel":"Windows (x64)","Sha256Checksum":"59a521fea00612a4ea1481d6ba6a3c8b50eff1e206abf5d99ed315b12ae1a24d","Version":"2026.10","EulaUrl":"/burp/eula"}],"categories":["Desktop"],"content":"\u003cp\u003e\u000d\u000aThis release introduces support for HTTP Digest authentication, improves notifications and BApp restrictions, fixes several bugs, and updates Burp\u0027s browser.\u000d\u000a\u003c/p\u003e\u000d\u000a\u003ch2\u003e\u000d\u000aHTTP Digest authentication support\u000d\u000a\u003c/h2\u003e\u003cp\u003e\u000d\u000aWe\u0027ve reintroduced support for HTTP Digest authentication, making it easier to test applications that use this authentication method without relying on an older version of Burp or a workaround.\u000d\u000a\u003c/p\u003e\u000d\u000a\u003ch2\u003e\u000d\u000aImproved notifications\u000d\u000a\u003c/h2\u003e\u003cp\u003e\u000d\u000aNotifications now stay with Burp\u0027s main windows rather than appearing over dialogs. If a window closes, any notifications attached to it move to another window, so they remain visible and accessible.\u000d\u000a\u003c/p\u003e\u000d\u000a\u003ch2\u003e\u000d\u000aBug fixes\u000d\u000a\u003c/h2\u003e\u003cp\u003e\u000d\u000aWe\u0027ve fixed the following issues:\u000d\u000a\u003c/p\u003e\u003cul\u003e\u003cli\u003e\u000d\u000aDocumentation links in the Event Log now open correctly when clicked.\u000d\u000a\u003c/li\u003e\u003cli\u003e\u000d\u000aHovering over large \u003ccode\u003e__VIEWSTATE\u003c/code\u003e parameters in the Inspector no longer causes Burp to hang or crash on Linux.\u000d\u000a\u003c/li\u003e\u003cli\u003e\u000d\u000aThe issue count on Dashboard scan tasks now updates correctly when you delete an issue.\u000d\u000a\u000d\u000a\u003c/li\u003e\u003cli\u003e\u000d\u000aBurp now preserves your extension settings if you update before all your extensions have finished loading. Previously, some extensions could be missing after the restart and need reloading manually.\u000d\u000a\u003c/li\u003e\u003cli\u003e\u000d\u000aHTTP messages containing server-sent event (SSE) responses are now sent to Organizer correctly. Items added afterwards are also numbered correctly.\u000d\u000a\u003c/li\u003e\u003cli\u003e\u000d\u000aWebSocket Repeater tabs now retain their connection data when Burp repairs a corrupted project, so recovered tabs remain usable.\u000d\u000a\u003c/li\u003e\u003cli\u003e\u000d\u000aFixed an issue where loading a project configuration using \u003ccode\u003e--config-file\u003c/code\u003e could silently discard the SOCKS proxy bypass list. This meant traffic intended to bypass the proxy could be routed through it instead.\u000d\u000a\u003c/li\u003e\u003cli\u003e\u000d\u000aYou can now cancel requests in Repeater while their responses are streaming.\u000d\u000a\u003c/li\u003e\u003c/ul\u003e\u000d\u000a\u003ch2\u003e\u000d\u000aBrowser upgrade\u000d\u000a\u003c/h2\u003e\u003cp\u003e\u000d\u000aWe\u0027ve upgraded Burp\u0027s browser to Chromium 154.0.8037.98 for Windows & macOS, and 154.0.8037.97 for Linux. For more information, see the \u003ca href=\u0022https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop.html\u0022\u003eChromium release notes\u003c/a\u003e.\u000d\u000a\u003c/p\u003e","id":4978,"labels":[],"buildCategory":"desktop","releaseChannels":["Early Adopter"],"releaseDate":"Released Monday 12 October 2026","title":"Professional / Community 2026.10","url":"/burp/releases/professional-community-2026-10","version":"2026.10"},{"builds":[{"Md5Checksum":"bb5bc5e078e04a2ed94212d11794bafe","BuildCategoryEdition":"Burp Suite Desktop","BuildCategoryId":"desktop","BuildCategoryPlatform":"AgentUpdate","BuildCategoryPlatformLabel":"Scanner component updater","Sha256Checksum":"1ea52de8a42eb142d48fd1c4869d8c6df8b89c7a36a35f9cbabcbc184dfb2a70","Version":"2026.9.2","EulaUrl":"/burp/eula"},{"Md5Checksum":"7e40f4efc150d7991106d7c7c0b58634","BuildCategoryEdition":"Burp Suite Desktop","BuildCategoryId":"desktop","BuildCategoryPlatform":"Jar","BuildCategoryPlatformLabel":"JAR","Sha256Checksum":"3571f8cadbfd65b0b090d2753735c40b76ad7fdde0b927df2b22ec46ea09693a","Version":"2026.9.2","EulaUrl":"/burp/eula"},{"Md5Checksum":"dab364c7e92c92c118992e3fa20f747f","BuildCategoryEdition":"Burp Suite Desktop","BuildCategoryId":"desktop","BuildCategoryPlatform":"Linux","BuildCategoryPlatformLabel":"Linux (x64)","Sha256Checksum":"5aabf372907c474b74331029ba109e56c5f20b8657fa16a9f47a8ab6014c9fbe","Version":"2026.9.2","EulaUrl":"/burp/eula"},{"Md5Checksum":"42ad2b1c788d365e01d30ea009fa071e","BuildCategoryEdition":"Burp Suite Desktop","BuildCategoryId":"desktop","BuildCategoryPlatform":"LinuxArm64","BuildCategoryPlatformLabel":"Linux (ARM)","Sha256Checksum":"6ddcd34bf055693106d8e624f1341ef61e00e86d3d950dcf136b43578caf55f3","Version":"2026.9.2","EulaUrl":"/burp/eula"},{"Md5Checksum":"867e392288ba4bbc271bce6b999a0637","BuildCategoryEdition":"Burp Suite Desktop","BuildCategoryId":"desktop","BuildCategoryPlatform":"MacOsArm64","BuildCategoryPlatformLabel":"macOS (Apple silicon)","Sha256Checksum":"a3f201953bda2173c03ad27323b89f7b07d34cbfa3062b78605df2c29a653fc8","Version":"2026.9.2","EulaUrl":"/burp/eula"},{"Md5Checksum":"da4c25c7de36e4fdb9778e64b6b17668","BuildCategoryEdition":"Burp Suite Desktop","BuildCategoryId":"desktop","BuildCategoryPlatform":"MacOsx","BuildCategoryPlatformLabel":"macOS (Intel)","Sha256Checksum":"fad033eb8e60b5707cc25b4642331da14433fcc54ea6491499ffd21982d8f950","Version":"2026.9.2","EulaUrl":"/burp/eula"},{"Md5Checksum":"7087443395b788c7279357bac3ff7d00","BuildCategoryEdition":"Burp Suite Desktop","BuildCategoryId":"desktop","BuildCategoryPlatform":"WindowsArm64","BuildCategoryPlatformLabel":"Windows (ARM)","Sha256Checksum":"e4bd207230c76c965dcf0e5bfaafa284cf31b100354f3172eb7a552980afe353","Version":"2026.9.2","EulaUrl":"/burp/eula"},{"Md5Checksum":"926792b3db0fa1364feb72b01458f0e1","BuildCategoryEdition":"Burp Suite Desktop","BuildCategoryId":"desktop","BuildCategoryPlatform":"WindowsX64","BuildCategoryPlatformLabel":"Windows (x64)","Sha256Checksum":"866101d7317c8e7f0456f6c9516ad71d8ad24085a3db0abe5a55f03c4a25be0f","Version":"2026.9.2","EulaUrl":"/burp/eula"}],"categories":["Desktop"],"content":"\u003cp\u003eThis release upgrades Burp\u0027s browser to Chromium 154.0.8037.98 for Windows & macOS and 154.0.8037.97 for Linux. For more information, see the \u003ca href=\u0022https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop.html\u0022\u003eChromium release notes\u003c/a\u003e.\u003c/p\u003e","id":4977,"labels":[],"buildCategory":"desktop","releaseChannels":["Stable"],"releaseDate":"Released Friday 9 October 2026","title":"Professional / Community 2026.9.2","url":"/burp/releases/professional-community-2026-9-2","version":"2026.9.2"},{"builds":[{"Md5Checksum":"8ebcf47009916ba0d186ec0a63238cdf","BuildCategoryEdition":"Burp Suite DAST","BuildCategoryId":"dast","BuildCategoryPlatform":"Kubernetes","BuildCategoryPlatformLabel":"Helm chart","Sha256Checksum":"8b9255324ee12cf3347faf9cd8da843516f69847c2dbac9c5eba65df08cb4b4f","Version":"2026.10","EulaUrl":"/burp/eula/dast"},{"Md5Checksum":"c4d36113613089b639de0ffce4b904b4","BuildCategoryEdition":"Burp Suite DAST","BuildCategoryId":"dast","BuildCategoryPlatform":"Linux","BuildCategoryPlatformLabel":"Linux installer (x64)","Sha256Checksum":"b1bb2fb9352e4c351271577e44b7496443b631bfe46f565e4d00b5b1451fda7e","Version":"2026.10","EulaUrl":"/burp/eula/dast"},{"Md5Checksum":"9b073c83e96b3be5827ef0283853e017","BuildCategoryEdition":"Burp Suite DAST","BuildCategoryId":"dast","BuildCategoryPlatform":"Updater","BuildCategoryPlatformLabel":"Server component updater","Sha256Checksum":"197d0e0633d48bb4aba2068f863f60f9a213a16bb695bfea30975c3741d2bdaa","Version":"2026.10","EulaUrl":"/burp/eula/dast"},{"Md5Checksum":"2471840b6d56ce3d0e760aff5539f93a","BuildCategoryEdition":"Burp Suite DAST","BuildCategoryId":"dast","BuildCategoryPlatform":"WindowsX64","BuildCategoryPlatformLabel":"Windows installer (x64)","Sha256Checksum":"23dde0922b46fa4f508a26f0eb192002623b9fffd9dd095498b5871dc91700e1","Version":"2026.10","EulaUrl":"/burp/eula/dast"},{"Md5Checksum":"ba2e51c8aaf49851204305618f9e0bc3","BuildCategoryEdition":"dast","BuildCategoryId":"dast_agent","BuildCategoryPlatform":"AgentUpdate","BuildCategoryPlatformLabel":"Scanner component updater","Sha256Checksum":"d027e89265f4f90f86d77b54990f9b137b18bb85204a38e87e931c3d6d42591f","Version":"2026.10.54867","EulaUrl":"/burp/eula/dast_agent"}],"categories":["DAST"],"content":"\u003cp\u003e\u003c/p\u003e\u003cp\u003eThis release lets you apply triage decisions to matching issues, adds issue retests to the GraphQL API, makes scans faster, and fixes a number of bugs.\u003c/p\u003e\u003ch2\u003eApply triage decisions to matching issues with issue management rules\u003c/h2\u003e\u003cp\u003eWhen you mark an issue as a false positive or accepted risk, or change its severity, you can now choose how widely to apply the change:\u003cbr\u003e\u003c/p\u003e\u003cul\u003e\u003cli\u003eThis issue only\u003c/li\u003e\u003cli\u003eThis issue type at this URL\u003c/li\u003e\u003cli\u003eThis issue type anywhere on this site\u003c/li\u003e\u003c/ul\u003e\u003cp\u003eBurp Suite DAST updates the matching issues on the site straight away and creates an issue management rule. Matching issues found in future scans are then handled the same way, so you don\u0027t need to triage them again.\u003c/p\u003e\u003cp\u003eTo view or delete your rules, go to \u003cb\u003eSettings > Issue management rules\u003c/b\u003e. Deleting a rule doesn\u0027t change issues it has already updated.\u003c/p\u003e\u003ch2\u003eVerify fixes automatically with retests from the API\u003c/h2\u003e\u003cp\u003eYou can now trigger issue retests through the GraphQL API, so you can confirm that vulnerabilities are fixed without running a full scan or opening Burp Suite DAST.\u003c/p\u003e\u003cp\u003eFor more information, see the \u003ca href=\u0022https://portswigger.net/burp/extensibility/dast/graphql-api/index.html\u0022 target=\u0022_blank\u0022\u003eBurp Suite DAST GraphQL Schema\u003c/a\u003e.\u003c/p\u003e\u003ch2\u003eFaster scans that use less disk space\u003c/h2\u003e\u003cp\u003eWe made performance improvements to the scanner. Scans now run faster and take up less disk space.\u003c/p\u003e\u003ch2\u003eBug fixes\u003c/h2\u003e\u003cp\u003eWe\u0027ve fixed the following bugs:\u003cbr\u003e\u003c/p\u003e\u003cul\u003e\u003cli\u003eJira integration rules that use the same custom field no longer show or save each other\u0027s values.\u003c/li\u003e\u003cli\u003eOpenAPI definitions with paths written without a leading slash are now scanned at the declared path, instead of the server root.\u003cbr\u003e\u003c/li\u003e\u003cli\u003eOpenAPI definitions with very large numeric bounds no longer cause scans to fail.\u003c/li\u003e\u003cli\u003eSOAP services defined by a WSDL with a templated or unusable service address are now scanned, instead of yielding no operations.\u003c/li\u003e\u003cli\u003eScan coverage is improved on HTTP/2 sites: requests interrupted when the server closes a connection are now retried.\u003c/li\u003e\u003cli\u003eThe count on the \u003cb\u003eAll issues\u003c/b\u003e tab on the home page now matches the filters you have applied.\u003cbr\u003e\u003c/li\u003e\u003c/ul\u003e","id":4976,"labels":[],"buildCategory":"dast","releaseChannels":["Stable"],"releaseDate":"Released Thursday 8 October 2026","title":"\u0009DAST 2026.10","url":"/burp/releases/dast-2026-10","version":"2026.10"},{"builds":[{"Md5Checksum":"aa568777477a38c6842e9ea78274193a","BuildCategoryEdition":"Burp Suite Desktop","BuildCategoryId":"desktop","BuildCategoryPlatform":"AgentUpdate","BuildCategoryPlatformLabel":"Scanner component updater","Sha256Checksum":"fa915f980428f0d3094be99ab73decf2ba86f574394b89881df5e00f5d374a28","Version":"2026.9.1","EulaUrl":"/burp/eula"},{"Md5Checksum":"60805cb9c96c573ccc0dbb2bc9ad8411","BuildCategoryEdition":"Burp Suite Desktop","BuildCategoryId":"desktop","BuildCategoryPlatform":"Jar","BuildCategoryPlatformLabel":"JAR","Sha256Checksum":"f0580f2ef66e679546f5363277d8c1ca72cdcbbbfc3dc4791c46cf2c0508119a","Version":"2026.9.1","EulaUrl":"/burp/eula"},{"Md5Checksum":"37f448e26bd1cb85c97b16bdb11383fd","BuildCategoryEdition":"Burp Suite Desktop","BuildCategoryId":"desktop","BuildCategoryPlatform":"Linux","BuildCategoryPlatformLabel":"Linux (x64)","Sha256Checksum":"5afff3939677de47b69dde71dc0fc9557e30dfbf112618bb9de7b8a6f696ab72","Version":"2026.9.1","EulaUrl":"/burp/eula"},{"Md5Checksum":"e36baa1e3bb2c49b7ec283b09d259dda","BuildCategoryEdition":"Burp Suite Desktop","BuildCategoryId":"desktop","BuildCategoryPlatform":"LinuxArm64","BuildCategoryPlatformLabel":"Linux (ARM)","Sha256Checksum":"048f9596cbabafca69a2c998318c1931d21aa3522c0a9bf5644024a90a09944a","Version":"2026.9.1","EulaUrl":"/burp/eula"},{"Md5Checksum":"e4c4db61fe74fee8dd46f8c751cc9a70","BuildCategoryEdition":"Burp Suite Desktop","BuildCategoryId":"desktop","BuildCategoryPlatform":"MacOsArm64","BuildCategoryPlatformLabel":"macOS (Apple silicon)","Sha256Checksum":"df1f286ca447cd0661915b3d7586c5e8ddbaf16ce1043732d8bf999633d60fa7","Version":"2026.9.1","EulaUrl":"/burp/eula"},{"Md5Checksum":"b2abd1e030100704ca57db9ff39a9c63","BuildCategoryEdition":"Burp Suite Desktop","BuildCategoryId":"desktop","BuildCategoryPlatform":"MacOsx","BuildCategoryPlatformLabel":"macOS (Intel)","Sha256Checksum":"85c05592d930ceb7139e28bb38697d1c4a3d454c64ac2e1d19c65c1cbd775e01","Version":"2026.9.1","EulaUrl":"/burp/eula"},{"Md5Checksum":"d174defb3b0109bf2f7ad2ef10645894","BuildCategoryEdition":"Burp Suite Desktop","BuildCategoryId":"desktop","BuildCategoryPlatform":"WindowsArm64","BuildCategoryPlatformLabel":"Windows (ARM)","Sha256Checksum":"4c80144eb36b245106b60b07f5c06648d11aa97ef93cf0e5297b203d52f85475","Version":"2026.9.1","EulaUrl":"/burp/eula"},{"Md5Checksum":"50469fb5648772a190ac7c4acaba4a50","BuildCategoryEdition":"Burp Suite Desktop","BuildCategoryId":"desktop","BuildCategoryPlatform":"WindowsX64","BuildCategoryPlatformLabel":"Windows (x64)","Sha256Checksum":"ceac9a6931477d2335fbf124dffda6a519fb99dcc384113c34f170ad81debe9c","Version":"2026.9.1","EulaUrl":"/burp/eula"}],"categories":["Desktop"],"content":"\u003cp\u003eThis release adds the ability to export SMTP Collaborator interactions as email files, expands hotkey and title bar customization, and improves command palette performance. It also includes a range of bug fixes.\u003c/p\u003e\u000d\u000a\u003ch2\u003eExport SMTP Collaborator interactions as email files\u003c/h2\u003e\u000d\u000a\u003cp\u003eYou can now export individual SMTP interactions from Burp Collaborator as \u003ccode\u003e.eml\u003c/code\u003e files.\u003c/p\u003e\u000d\u000a\u003cp\u003eSelect a single SMTP interaction and choose \u003cstrong\u003eExport email (.eml)\u003c/strong\u003e from the context menu. The exported file includes the email content and relevant Collaborator metadata, and can be opened in standard email clients.\u003c/p\u003e\u000d\u000a\u003ch2\u003eMore actions available for hotkeys and the title bar\u003c/h2\u003e\u000d\u000a\u003cp\u003eYou can now assign a hotkey to every action listed in the Hotkeys settings, including actions that couldn\u0027t previously be assigned one.\u003c/p\u003e\u000d\u000a\u003cp\u003eWe\u0027ve also expanded the range of actions you can add to the title bar, making it easier to keep the actions you use most often within easy reach.\u003c/p\u003e\u000d\u000a\u003ch2\u003eImproved command palette performance\u003c/h2\u003e\u000d\u000a\u003cp\u003eWe\u0027ve improved command palette performance, reducing lag when searching and navigating through large numbers of actions.\u003c/p\u003e\u000d\u000a\u003ch2\u003eOther improvements\u003c/h2\u003e\u000d\u000a  \u003cp\u003eWe\u0027ve renewed the bundled self-signed PortSwigger TLS certificate ahead of its expiry. This is separate from the Burp CA certificate that you install in your browser, so no action is required.\u003c/p\u003e\u000d\u000a\u003ch2\u003eBug fixes\u003c/h2\u003e\u000d\u000a\u003cp\u003eWe\u0027ve made the following fixes:\u003c/p\u003e\u000d\u000a\u003cul\u003e  \u003cli\u003eWe\u0027ve improved how securely Burp handles external references in OpenAPI definitions. We\u0027d like to thank 1rhino2 for reporting this.\u003c/li\u003e  \u003cli\u003eFixed an issue where testing a response body match-and-replace rule against longer responses could cause Burp to become unresponsive.\u003c/li\u003e  \u003cli\u003eBurp AI is now available under \u003cstrong\u003eSettings > Project > Logging\u003c/strong\u003e, where you can configure request and response logging for it. Previously, Burp AI traffic was not captured when logging was enabled for \u003cstrong\u003eAll tools\u003c/strong\u003e. This traffic is now included.\u003c/li\u003e  \u003cli\u003eFixed an issue where Burp could fail to create projects under restrictive AppLocker or Windows Defender Application Control (WDAC) policies. Required native libraries are now loaded from the Burp installation directory instead of temporary storage.\u003c/li\u003e  \u003cli\u003eFixed an issue in the Montoya API where \u003ccode\u003eByteArray.indexOf(Pattern, startIndexInclusive, endIndexExclusive)\u003c/code\u003e could throw a \u003ccode\u003eStringIndexOutOfBoundsException\u003c/code\u003e for a valid, in-bounds range. Valid ranges no longer cause this exception.\u003c/li\u003e  \u003cli\u003eBurp Scanner now evaluates Content Security Policy directives more accurately, including \u003ccode\u003edefault-src\u003c/code\u003e fallback behavior and directives containing unparseable source expressions. This fixes false negatives that could cause some CSP issues to be missed.\u003c/li\u003e\u003c/ul\u003e","id":4974,"labels":[],"buildCategory":"desktop","releaseChannels":["Stable"],"releaseDate":"Released Wednesday 7 October 2026","title":"Professional / Community 2026.9.1","url":"/burp/releases/professional-community-2026-9-1","version":"2026.9.1"},{"builds":[{"Md5Checksum":"320dbbce26a3d64757b10d926da4a289","BuildCategoryEdition":"Burp Suite Desktop","BuildCategoryId":"desktop","BuildCategoryPlatform":"AgentUpdate","BuildCategoryPlatformLabel":"Scanner component updater","Sha256Checksum":"144c270cf6919cd939fce1f0f2b1cd434f035b3b620b1f4bf63a2922f8f09b32","Version":"2026.9","EulaUrl":"/burp/eula"},{"Md5Checksum":"3fae99dc9b073d04381ece836a7b46f5","BuildCategoryEdition":"Burp Suite Desktop","BuildCategoryId":"desktop","BuildCategoryPlatform":"Jar","BuildCategoryPlatformLabel":"JAR","Sha256Checksum":"d6c80be60575b59a3097e939b1cf4acf2efd104c0f6ed05166753180365fc7fc","Version":"2026.9","EulaUrl":"/burp/eula"},{"Md5Checksum":"fdabed835e79c0f8278a09c25c0d693f","BuildCategoryEdition":"Burp Suite Desktop","BuildCategoryId":"desktop","BuildCategoryPlatform":"Linux","BuildCategoryPlatformLabel":"Linux (x64)","Sha256Checksum":"23afc767e60408d2a7f7d72a66f20ef567367440ef8a57dc9772b1065fc6cf6b","Version":"2026.9","EulaUrl":"/burp/eula"},{"Md5Checksum":"ebb2af8d39ef8b355d6dfdce314f2102","BuildCategoryEdition":"Burp Suite Desktop","BuildCategoryId":"desktop","BuildCategoryPlatform":"LinuxArm64","BuildCategoryPlatformLabel":"Linux (ARM)","Sha256Checksum":"631f0a9841070745c559fd323d4eb2c8bd959acbb74e01bf40c4472ec5c37f68","Version":"2026.9","EulaUrl":"/burp/eula"},{"Md5Checksum":"4ea137bad9bf9de430a1583999fc37ab","BuildCategoryEdition":"Burp Suite Desktop","BuildCategoryId":"desktop","BuildCategoryPlatform":"MacOsArm64","BuildCategoryPlatformLabel":"macOS (Apple silicon)","Sha256Checksum":"4d36f592fddf6e0cd3437807b57f15d8e35712414a16cd76c8f8843c972b152f","Version":"2026.9","EulaUrl":"/burp/eula"},{"Md5Checksum":"a63093541d23515ab6894f29f8c17489","BuildCategoryEdition":"Burp Suite Desktop","BuildCategoryId":"desktop","BuildCategoryPlatform":"MacOsx","BuildCategoryPlatformLabel":"macOS (Intel)","Sha256Checksum":"e871c83a103438f4f90dc488940ce8d1af0af6f96a3138b22fb3537747cbb43f","Version":"2026.9","EulaUrl":"/burp/eula"},{"Md5Checksum":"9f3b59ec5a5a255a07212bb666e6e01b","BuildCategoryEdition":"Burp Suite Desktop","BuildCategoryId":"desktop","BuildCategoryPlatform":"WindowsArm64","BuildCategoryPlatformLabel":"Windows (ARM)","Sha256Checksum":"518529e55bdf7125f354202d56648fb1910a834ac7e51668d875fe5d262b30d1","Version":"2026.9","EulaUrl":"/burp/eula"},{"Md5Checksum":"48a1570b21028acc670e07742e4d86bb","BuildCategoryEdition":"Burp Suite Desktop","BuildCategoryId":"desktop","BuildCategoryPlatform":"WindowsX64","BuildCategoryPlatformLabel":"Windows (x64)","Sha256Checksum":"09fcbce676a0ad50be8deb76d4da6287003238d6141d97fbe5fd1f2cef79134e","Version":"2026.9","EulaUrl":"/burp/eula"}],"categories":["Desktop"],"content":"\u003cp\u003eThis release adds the ability to export SMTP Collaborator interactions as email files, expands hotkey and title bar customization, and improves command palette performance. It also includes a range of bug fixes.\u003c/p\u003e\u000d\u000a\u003ch2\u003eExport SMTP Collaborator interactions as email files\u003c/h2\u003e\u000d\u000a\u003cp\u003eYou can now export individual SMTP interactions from Burp Collaborator as \u003ccode\u003e.eml\u003c/code\u003e files.\u003c/p\u003e\u000d\u000a\u003cp\u003eSelect a single SMTP interaction and choose \u003cstrong\u003eExport email (.eml)\u003c/strong\u003e from the context menu. The exported file includes the email content and relevant Collaborator metadata, and can be opened in standard email clients.\u003c/p\u003e\u000d\u000a\u003ch2\u003eMore actions available for hotkeys and the title bar\u003c/h2\u003e\u000d\u000a\u003cp\u003eYou can now assign a hotkey to every action listed in the Hotkeys settings, including actions that couldn\u0027t previously be assigned one.\u003c/p\u003e\u000d\u000a\u003cp\u003eWe\u0027ve also expanded the range of actions you can add to the title bar, making it easier to keep the actions you use most often within easy reach.\u003c/p\u003e\u000d\u000a\u003ch2\u003eImproved command palette performance\u003c/h2\u003e\u000d\u000a\u003cp\u003eWe\u0027ve improved command palette performance, reducing lag when searching and navigating through large numbers of actions.\u003c/p\u003e\u000d\u000a\u003ch2\u003eOther improvements\u003c/h2\u003e\u000d\u000a  \u003cp\u003eWe\u0027ve renewed the bundled self-signed PortSwigger TLS certificate ahead of its expiry. This is separate from the Burp CA certificate that you install in your browser, so no action is required.\u003c/p\u003e\u000d\u000a\u003ch2\u003eBug fixes\u003c/h2\u003e\u000d\u000a\u003cp\u003eWe\u0027ve made the following fixes:\u003c/p\u003e\u000d\u000a\u003cul\u003e  \u003cli\u003eFixed an issue where testing a response body match-and-replace rule against longer responses could cause Burp to become unresponsive.\u003c/li\u003e  \u003cli\u003eBurp AI is now available under \u003cstrong\u003eSettings > Project > Logging\u003c/strong\u003e, where you can configure request and response logging for it. Previously, Burp AI traffic was not captured when logging was enabled for \u003cstrong\u003eAll tools\u003c/strong\u003e. This traffic is now included.\u003c/li\u003e  \u003cli\u003eFixed an issue where Burp could fail to create projects under restrictive AppLocker or Windows Defender Application Control (WDAC) policies. Required native libraries are now loaded from the Burp installation directory instead of temporary storage.\u003c/li\u003e  \u003cli\u003eFixed an issue in the Montoya API where \u003ccode\u003eByteArray.indexOf(Pattern, startIndexInclusive, endIndexExclusive)\u003c/code\u003e could throw a \u003ccode\u003eStringIndexOutOfBoundsException\u003c/code\u003e for a valid, in-bounds range. Valid ranges no longer cause this exception.\u003c/li\u003e  \u003cli\u003eBurp Scanner now evaluates Content Security Policy directives more accurately, including \u003ccode\u003edefault-src\u003c/code\u003e fallback behavior and directives containing unparseable source expressions. This fixes false negatives that could cause some CSP issues to be missed.\u003c/li\u003e\u003c/ul\u003e","id":4972,"labels":[],"buildCategory":"desktop","releaseChannels":["Early Adopter"],"releaseDate":"Released Monday 21 September 2026","title":"Professional / Community 2026.9","url":"/burp/releases/professional-community-2026-9","version":"2026.9"},{"builds":[{"Md5Checksum":"2bc1d3d62f69e46516cb7c846ad0649b","BuildCategoryEdition":"Burp Suite DAST","BuildCategoryId":"dast","BuildCategoryPlatform":"Kubernetes","BuildCategoryPlatformLabel":"Helm chart","Sha256Checksum":"531d4c6e2be4a474eab4b00580d75648835081d99aaef0bf4e6753232ed2dca6","Version":"2026.9","EulaUrl":"/burp/eula/dast"},{"Md5Checksum":"5f30cd449a398594f071ba2c1a421b56","BuildCategoryEdition":"Burp Suite DAST","BuildCategoryId":"dast","BuildCategoryPlatform":"Linux","BuildCategoryPlatformLabel":"Linux installer (x64)","Sha256Checksum":"137e9d2ecffc56f18de08e62743c1b5d206c69d469165c37067d88a004a5b293","Version":"2026.9","EulaUrl":"/burp/eula/dast"},{"Md5Checksum":"5dffd8937869b9ed2a1f15adb7be5d61","BuildCategoryEdition":"Burp Suite DAST","BuildCategoryId":"dast","BuildCategoryPlatform":"Updater","BuildCategoryPlatformLabel":"Server component updater","Sha256Checksum":"c130340a3222615166db439031183e964bc00e9a08494533eac0f7c81bcf6f7b","Version":"2026.9","EulaUrl":"/burp/eula/dast"},{"Md5Checksum":"b5db0424c4eda8a1a26682a2bbb51d00","BuildCategoryEdition":"Burp Suite DAST","BuildCategoryId":"dast","BuildCategoryPlatform":"WindowsX64","BuildCategoryPlatformLabel":"Windows installer (x64)","Sha256Checksum":"ba153531707dfd25633a7f69d2853521fad644833356b2a7a9fdbf05b9e126b2","Version":"2026.9","EulaUrl":"/burp/eula/dast"},{"Md5Checksum":"ba2e51c8aaf49851204305618f9e0bc3","BuildCategoryEdition":"dast","BuildCategoryId":"dast_agent","BuildCategoryPlatform":"AgentUpdate","BuildCategoryPlatformLabel":"Scanner component updater","Sha256Checksum":"d027e89265f4f90f86d77b54990f9b137b18bb85204a38e87e931c3d6d42591f","Version":"2026.10.54867","EulaUrl":"/burp/eula/dast_agent"}],"categories":["DAST"],"content":"\u003cp\u003eThis release adds the option to download issues as a CSV file from the \u003cstrong\u003eIssues\u003c/strong\u003e tab. For more information, see \u003ca href=\u0022https://portswigger.net/burp/documentation/dast/user-guide/work-with-scan-results/managing-issues\u0022\u003eManaging issues in Burp Suite DAST\u003c/a\u003e. It also includes security fixes.\u003c/p\u003e\u003ch2\u003eJava update\u003c/h2\u003e\u003cp\u003eWe updated Java Runtime to 21.0.12.1 and Azul Zulu to 21.52.203.\u003c/p\u003e\u003ch2\u003eBug fix\u003c/h2\u003e\u003cp\u003eWe fixed a bug which caused valid client certificates to be rejected when adding them to a scan configuration.\u003c/p\u003e","id":4967,"labels":[],"buildCategory":"dast","releaseChannels":["Stable"],"releaseDate":"Released Thursday 3 September 2026","title":"DAST 2026.9","url":"/burp/releases/dast-2026-9","version":"2026.9"},{"builds":[{"Md5Checksum":"bf9ed47e439a6b64a8ea75fd2de2e75b","BuildCategoryEdition":"Burp Suite DAST","BuildCategoryId":"dast","BuildCategoryPlatform":"Kubernetes","BuildCategoryPlatformLabel":"Helm chart","Sha256Checksum":"37c1711225e241ba27e814339b068daf80d3589b7edefd273ceada0fef4cdae9","Version":"2026.8.2","EulaUrl":"/burp/eula/dast"},{"Md5Checksum":"8a830d0c6d009c8683e7a2551343db76","BuildCategoryEdition":"Burp Suite DAST","BuildCategoryId":"dast","BuildCategoryPlatform":"Linux","BuildCategoryPlatformLabel":"Linux installer (x64)","Sha256Checksum":"1479cd9bb9573bd3b676275bcc4cbd8b91cf7103cb19c3f940523418648c194e","Version":"2026.8.2","EulaUrl":"/burp/eula/dast"},{"Md5Checksum":"405c06209fe909ee55a73dfd2e7322a3","BuildCategoryEdition":"Burp Suite DAST","BuildCategoryId":"dast","BuildCategoryPlatform":"Updater","BuildCategoryPlatformLabel":"Server component updater","Sha256Checksum":"cb4dd86fbd64347f1e77fbcca3107e8015408272902951e61ae03396770cd6cf","Version":"2026.8.2","EulaUrl":"/burp/eula/dast"},{"Md5Checksum":"be869d59916731c5b40abaa870ca96b0","BuildCategoryEdition":"Burp Suite DAST","BuildCategoryId":"dast","BuildCategoryPlatform":"WindowsX64","BuildCategoryPlatformLabel":"Windows installer (x64)","Sha256Checksum":"98f20b4841d8269af0703a7170536350f5b2e9833b398baf93bde09d8cd1eb04","Version":"2026.8.2","EulaUrl":"/burp/eula/dast"},{"Md5Checksum":"ba2e51c8aaf49851204305618f9e0bc3","BuildCategoryEdition":"dast","BuildCategoryId":"dast_agent","BuildCategoryPlatform":"AgentUpdate","BuildCategoryPlatformLabel":"Scanner component updater","Sha256Checksum":"d027e89265f4f90f86d77b54990f9b137b18bb85204a38e87e931c3d6d42591f","Version":"2026.10.54867","EulaUrl":"/burp/eula/dast_agent"}],"categories":["DAST"],"content":"\u003cp\u003e\u000d\u000a    This release adds an MCP server for working with scans and issues from your preferred AI client, and makes Burp AI available to buy for Cloud customers.\u000d\u000a\u003c/p\u003e\u000d\u000a\u003ch2 id=\u0022work-with-burp-suite-dast-from-your-ai-client\u0022\u003eWork with Burp Suite DAST from your AI client\u003c/h2\u003e\u003cp\u003e\u000d\u000a    Connect tools such as Claude Code, Claude Desktop, or Cursor to Burp Suite DAST using an API key. You can review sites, scans, and issues, start or cancel scans, update issue statuses, check agent capacity, and generate scan reports.\u000d\u000a\u003c/p\u003e\u003cp\u003e\u000d\u000a    The MCP server is enabled by default, included with your subscription, and available for Cloud and self-hosted deployments. Your existing permissions still apply, and actions that make changes require confirmation.\u000d\u000a\u003c/p\u003e\u003cp\u003e\u000d\u000a    For more information, see \u003ca href=\u0022https://portswigger.net/burp/documentation/dast/user-guide/using-ai/mcp-server.html\u0022\u003eConnecting your AI client to the MCP server\u003c/a\u003e.\u003c/p\u003e\u003ch2\u003eBurp AI is now available for your Cloud deployment\u003c/h2\u003e\u003cp\u003eBurp AI is no longer in limited access. If you use a Cloud deployment of Burp Suite DAST, you can now buy Burp AI to use with your instance.\u003c/p\u003e\u003cp\u003eBurp AI stays off until you choose to use it. It stays disabled by default on every new site. You decide which sites Burp AI works on, and which issues it investigates. Turning it on and configuring it each need their own permission, so you can keep AI features to the people and sites you choose.\u003c/p\u003e\u003cp\u003eOnce you turn it on, Burp AI investigates the issues found during a scan to check whether they can be reproduced and exploited. It adds its findings to the issue details, including an impact analysis and manual reproduction steps, so you can prioritize and resolve issues faster. Burp AI can also record a login sequence for you, using credentials you provide.\u003c/p\u003e\u003cp\u003eBurp AI is only available to buy for Cloud deployments of Burp Suite DAST.\u003c/p\u003e\u003cp\u003eFor more information, see \u003ca href=\u0022https://portswigger.net/burp/documentation/dast/user-guide/burp-ai.html\u0022\u003eBurp AI\u003c/a\u003e.\u003c/p\u003e\u003cp\u003eTo find out how PortSwigger handles the data that AI features send, see \u003ca href=\u0022https://portswigger.net/burp/documentation/ai-features/trust/index.html\u0022\u003eAI trust and data handling\u003c/a\u003e.\u003c/p\u003e\u000d\u000a\u000d\u000a\u003ch2 id=\u0022map-your-identity-providers-groups-to-burp-suite-dast-groups\u0022\u003eMap your identity provider\u0027s groups to Burp Suite DAST groups\u003c/h2\u003e\u003cp\u003e\u000d\u000a    You can now choose the SAML attribute that Burp Suite DAST uses to determine group membership, instead of being limited to a single fixed attribute. Administrators can also map each identity provider group explicitly to a local Burp Suite DAST group.\u000d\u000a\u003c/p\u003e\u003cp\u003e\u000d\u000a    Burp Suite DAST uses these mappings instead of matching group names, so you no longer need to rename groups in your identity provider to match Burp Suite DAST. Existing groups continue to behave as they did before the upgrade. New groups are not matched until you set a mapping for them.\u000d\u000a\u003c/p\u003e\u003cp\u003e\u000d\u000a    Renaming a group no longer changes the identity provider group that it matches. To change what a group matches, edit its mapping.\u000d\u000a\u003c/p\u003e\u003cp\u003e\u000d\u000a    This applies to LDAP as well as SAML. For LDAP, the value that you map is the group\u0027s common name (CN).\u000d\u000a\u003c/p\u003e\u003cp\u003e\u000d\u000a    For more information, see \u003ca href=\u0022https://portswigger.net/burp/documentation/dast/user-guide/users-and-permissions/sso/permissions.html\u0022\u003eCreating local groups for SAML or LDAP\u003c/a\u003e.\u000d\u000a\u003c/p\u003e\u000d\u000a\u003ch2 id=\u0022bug-fixes\u0022\u003eBug fixes\u003c/h2\u003e\u003cp\u003e\u000d\u000a    We\u0027ve fixed the following bugs:\u000d\u000a\u003c/p\u003e\u003cul\u003e    \u003cli\u003e\u000d\u000a        Scans of GraphQL APIs configured through introspection could fail when the API returned a large introspection response.\u000d\u000a    \u003c/li\u003e    \u003cli\u003e\u000d\u000a        Deselecting an endpoint on the second or later page of a Postman collection\u0027s endpoint list returned you to the first page.\u000d\u000a    \u003c/li\u003e\u003c/ul\u003e","id":4965,"labels":[],"buildCategory":"dast","releaseChannels":["Stable"],"releaseDate":"Released Thursday 27 August 2026","title":"DAST 2026.8.2","url":"/burp/releases/dast-2026-8-2","version":"2026.8.2"}],"TotalCount":659,"TotalPageCount":66},"Status":5}