Levo.ai Burp Integration
Summary: Levo Inc. released version 0.2.1 of a Burp Suite extension that builds OpenAPI specs from Burp's traffic using Levo.ai, and detects and classifies PII to annotate those specs. By default specs are built for all traffic and traffic is not sent to Levo's SaaS, with both behaviors adjustable in the config menu; the extension was last updated 11 February 2026 and carries an overall system impact rating of Low.
What you should know: The extension's default builds specs from all captured traffic, not just target scopes, so a tester who does not narrow scope in the config menu produces API documentation covering everything Burp saw. PortSwigger states it makes no warranty about third-party extensions' quality or usefulness, which puts the review of what this tool captures and where it sends it on your team.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026