One month of Burp Suite in the Cloud - how are App Sec teams using it?
Summary: One month after PortSwigger launched a cloud-hosted version of Burp Suite Enterprise Edition, the company reports it is on average 8x quicker to reach a first scan than a self-hosted installation, and that cloud users see nearly three times fewer failed scans. A Switzerland-based customer automated scanning of 25+ applications and began scanning in under 24 hours, while AppSec teams in Asia, Europe, and North America are using the service.
What you should know: The vendor's own figures put failed-scan rates at roughly a third of self-hosted installs, a gap it attributes to a faster feedback loop and support access to debugging data - which raises the question of how many of your own scanning failures are configuration trial and error rather than real coverage.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026