gbhackers.com • 2h
PortSwigger Evolves Burp Suite with Burp AT Agentic AI
PortSwigger is introducing Burp AT (Agentic Testing), a module for Burp Suite that transitions automated security testing from deterministic, rule-based scanning to autonomous, agentic workflows. By utilizing AI agents capable of interacting with existing Burp Suite tools—such as Proxy, Repeater, and Scanner—the system can execute complex, multi-step investigative tasks. This evolution addresses the need for advanced vulnerability research while implementing a critical "control layer" to manage risks associated with unconstrained agent behavior, specifically preventing scope creep, unauthorized actions, and destructive testing through mandatory human-in-the-loop validation and strict permission sets.