Why it's time for App Sec to embrace AI: How Port Swigger is leading the charge
Summary: PortSwigger released Burp AI, its first AI-enhanced functionality for Burp Suite, live for Burp Suite Professional users on version 2025.2.3, with every Professional user given 10,000 free AI credits. The company argues AI should augment rather than replace pentesters, citing Burp Intruder's use by over 80,000 web app pentesters in 17,000+ organizations and projecting that the share of automatable pentesting tasks could rise from roughly 50% to as much as 80%.
Why it matters: PortSwigger's own framing is that malicious actors are already using AI to find vulnerabilities faster and scale attacks, so the defensive side falling behind is the concrete risk it names.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026