Burp Suite roadmap update: January 2023

Summary: PortSwigger's January 2023 Burp Suite roadmap lists completed work including popup support in recorded login sequences and revamped browser-powered scanning in the 2022.12.4 release, plus XML export of scan results in 2022.11 and replay of recorded login sequences in 2022.10. Planned items include declarative scan checks, React form handling, GraphQL and access control scan checks, hourly metered billing, CI/CD inversion of control, and SLSA Level 2 certification for Burp Suite Enterprise Edition, which the post says has well over 1,000 subscribers.
What you should know: The roadmap commits Burp Suite Enterprise Edition to SLSA Level 2 certification and to CI/CD inversion of control, which would let a CI system start a scanning machine in a container - shifting where and how scanning runs across a web portfolio.

Read the original at PortSwigger Research ↗

Topics: Vulnerabilities & Patching
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026