Professional / Community 2025.2
Summary: PortSwigger's Burp Suite 2025.2 release adds built-in AI support to the Montoya API, letting extensions interact with a large language model through PortSwigger's AI platform without external API keys, with costs debited from a user's AI credit balance. The release also adds a Bambda library for storing and reusing Bambdas, a downloadable extension starter project, and 10,000 free AI credits per user, equivalent to 5 US dollars of AI requests.
Bottom line: Every extension that calls the LLM draws down a metered credit balance, so AI-assisted testing now carries a per-request cost that someone has to budget and track. The release also requires users to accept a new EULA and an updated data processing agreement covering AI service provider processes.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026