App Sec experts share Burp Suite automation secrets and best practices

Summary: PortSwigger and HackerOne hosted a webinar on 6 April with Shopify application security engineer Leanne Shapton and pentester Joel Noguera on making web application security assessments more effective, drawing over 1,200 registrations. Shapton described how Shopify uses Burp Suite Enterprise Edition in the cloud to scale automated testing across its 6,000+ partner web apps, while Noguera covered balancing automation with manual testing in Burp Suite Professional and optimizing workflow with BApp extensions.
Why it matters: Shopify is running automated security testing across more than 6,000 partner web apps, a scale that makes the choice between automation and manual testing a capacity question rather than a tooling preference for any organization with a comparable partner or third-party surface.

Read the original at PortSwigger Research ↗

Topics: Vulnerabilities & Patching
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026