Burp 2.0: Where is live scanning?

Summary: PortSwigger's Burp 2.0 replaces the Burp 1.x "live scanning" feature, which by default ran a passive-only scan on all Proxy traffic, with a new concept called a "live task" created via the "New live task" button on the Dashboard. Live tasks can monitor traffic from multiple Burp tools rather than just the Proxy, support multiple configurations with fine-grained scope and action control, and Burp 2.0 creates two by default that populate the site map with observed links and perform passive-technique auditing.
Bottom line: The default behavior carries over: two live tasks are created automatically, so teams upgrading from 1.x inherit passive auditing and site map population without explicitly choosing it, and the expanded reach beyond the Proxy means more traffic can be monitored than the old setting covered.

Read the original at PortSwigger Research ↗

Topics: Vulnerabilities & Patching
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026