Cyber Risks · PortSwigger Research

Behind the Scenes of Burp AI: How we built it, and what's next

Summary: PortSwigger integrated AI into Burp Suite after a November 2024 private trial with 30 testers across multiple segments, then moved the feature from trial to production. On 31 March 2025 the company released a set of built-in AI-powered features and announced AI-Powered Extensibility through the Montoya API.

Bottom line: The tooling your penetration testers already use now runs AI features and third-party AI extensions through the Montoya API, so the testing workflow itself becomes another place where model behavior and data handling need to be accounted for.

Read the original at PortSwigger Research ↗

Topics
AI Security
Related