This release lets you switch projects and restart Burp more easily, and introduces a new Academy tab for accessing Web Security Academy labs directly from Burp. It also moves Burp AI's Explore and Explain features into Burp AT, and lets you control how long a private Collaborator server keeps interactions.
Switch projects and restart Burp
You can now create or open projects from the project menu in Burp's title bar. Burp asks whether to open the project in This window or a New window, so you can keep your current project open. You can also check for updates from this menu.
To restart Burp, select Burp > Restart. For disk-based projects, Burp reopens your current project with the same tab selected, and automated tasks retain their paused or running state. Restarting a temporary project preserves its settings but discards its contents. Restarting closes and reopens Burp, so anything an extension was running doesn't continue after the restart.
For more information, see Project files.
Access Web Security Academy labs from Burp
You can now browse and launch Web Security Academy labs directly from Burp Suite using the new Academy tab.
Browse labs by topic or learning path to find something you want to practice, then choose where to open them. You can also see which labs you've launched and track your progress as you work through them.
Burp AI features now create tasks in Burp AT
Explainer, Burp AI in Repeater, and Explore Issue now create tasks in Burp AT. This makes it easier to bring Burp AT into your testing, starting from the messages or findings you're already working on. Working in a Burp AT task enables you to ask follow-up questions, add evidence, and direct further testing in the same conversation.
Explain selected text
Explanations now appear in a Burp AT task instead of in Repeater's Explanations sidebar. Select the text you want to understand, then right-click and select Explain selected text. Burp AT opens and automatically runs a task to explain the selected text.
Additionally, AI-powered explanations are now available in more locations throughout Burp, including HTTP editors, WebSocket message editors, Scanner issue advisories, and Collaborator DNS interactions.
Explore messages from Repeater
You can now start a Burp AT task to explore a request or response directly from Repeater. This replaces Burp AI in Repeater.
With a Repeater tab open, click Explore request in Burp AT to open the prompt dialog. Enter your prompt and select the request, response, notes, or highlighted text to include. When you click the send icon, Burp AT opens and starts the task automatically.
For more information, see Exploring HTTP messages with Burp AT.
Explore Scanner issues
Explore Issue now creates a Burp AT task rather than a task on the Dashboard.
Click Explore issue in Burp AT on a scan issue's Advisory tab. Burp AT opens and starts investigating the issue automatically, using the issue details and evidence as context.
Existing Burp AI explore tasks remain in the Dashboard, where you can review their results and resume unfinished work.
For more information, see Exploring issues with Burp AT.
AI credits
The AI credits button has been removed from the bottom dock. You can now check your credit balance in Burp AT, in the Usage menu under Configure.
Configure private Collaborator interaction retention
You can now configure how long your private Collaborator server retains interactions that haven't been retrieved. The default is 14 days.
Set the interactionRetention configuration field to a whole number of days from 1 to 999, or use "unlimited" to disable age-based expiry. The server may delete interactions under memory pressure, regardless of the retention setting.
For more information, see Configuring the Collaborator server.