Using AI to find web app vulnerabilities: hacking expert John Hammond takes Burp AI for a spin
Summary: PortSwigger published a walkthrough in which hacking expert John Hammond demonstrates Burp AI, a feature set in Burp Suite's web vulnerability scanner that the company says identifies subtle vulnerabilities automatically and reduces false positives. PortSwigger states the features are designed to augment human testers rather than replace them, and it is running a promotional giveaway for users who share their Burp AI testing stories by Sunday 4th May.
Why it matters: The vendor's own framing is augmentation, not replacement - which puts the judgment of the human tester, not the tool, at the center of any assessment your team runs with it.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026