The Future of Application Security: key insights from the webinar
Summary: PortSwigger hosted its largest webinar to date in March with over 7,500 registrants, drawing on a pre-webinar survey of 582 AppSec professionals that cited time constraints, expanding attack surfaces, and signal-to-noise challenges as top pressures. The session announced Burp AI for Burp Suite Professional, renamed Burp Suite Enterprise Edition to Burp Suite DAST with native REST (OpenAPI/Swagger) and SOAP support, and outlined 2025 roadmap items including scan freeze windows, asset tagging, and full issue histories.
What you should know: The survey of 582 AppSec professionals puts false positives, production blind spots, and tool sprawl among the forces draining security resources, and the vendor's answer is consolidation into one lifecycle rather than more point tools. The stated goal of Burp AI is to augment testers rather than replace them, so the question for a security leader is where AI assistance sits in the review path and who remains accountable for what it flags.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026