PortSwigger Adds Agentic AI Pentesting to Burp Suite

PortSwigger has launched Burp AT, a public beta that adds agentic AI tools to Burp Suite Professional for web penetration testing, the company announced in a press release.

Burp AT lets pentesters assign defined investigative tasks to agents. The agents can use Burp Suite tools, project context, traffic data, target structure, issues, and prior discoveries while testing an application.

Pentesters can set how much work agents may do for each task. Actions can proceed automatically, require approval, or be blocked. Burp enforces scope, tool access, permissions, and approval rules outside the model, and records agent requests and tool activity in the Burp project.

The beta is available now to Burp Suite Professional users. PortSwigger said it will expand the product during the beta and document its current capabilities and known limits.