Cyber Risks · PortSwigger Research

API Workflow Manager

Summary: PortSwigger's BApp Store lists API Workflow Manager, a Burp extension by Omkar Yepre at version 1.0.1, last updated 22 January 2026, that centralizes API endpoint management during security testing. It collects, categorizes, and exports HTTP requests with workflow labels through CSV and cURL exports, and PortSwigger states it makes no warranty about third-party extensions' quality or usefulness.

Key Takeaway: This is a third-party extension that handles captured HTTP requests, and PortSwigger explicitly disclaims any warranty on quality or fitness - so the request data flowing through it, and the testing record it produces, rest on code the vendor does not stand behind.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related