The future of security testing: harness AI-Powered Extensibility in Burp 🚀
Summary: PortSwigger announced AI-powered extensions in Burp Suite Professional, letting developers integrate AI capabilities through the Montoya API, with all AI interactions managed within PortSwigger's trust boundary and data not used for training. Gareth Heyes enhanced his Hackvertor extension with AI features that create custom tags for advanced input transformations without writing code, and all Burp Suite Professional users received 10,000 free AI credits.
What you should know: Every Burp Suite Professional user now holds 10,000 AI credits and an API for wiring LLM calls into their testing extensions - which means AI-generated requests and analysis will start flowing through pentest workflows, and the vendor's data-handling terms are the only thing standing between that traffic and a third-party model.
Read the original at PortSwigger Research ↗
- Topics
- AI Security
- Related
- SECURITY AFFAIRS AI-CYBERSECURITY NEWSLETTER ROUND 8 Cyber Risks · Nov 15, 2026Pentagon Renames CDAO ‘Super Intelligence Office’ Cyber Risks · Nov 15, 2026186 Fake AI Domains Redirect Users to Click Fix Lures, Browser Malware, and Search Hijackers Cyber Risks · Nov 12, 2026