Launching scans
Summary: PortSwigger outlined how users will launch scans in a forthcoming Burp Suite update, replacing the separate context menu options for passive scan, active scan, and spider with a single "Scan" option and a "New scan" button that opens a scan launcher. The update folds crawling and auditing under the single term scanning, lets users apply multiple configurations sequentially from a configuration library, and gives passive-only scans the same monitoring and control UI as active scans.
What's compelling: The distinction Burp has drawn between passive and active scanning as fundamentally different actions is disappearing, so teams whose processes and approvals are built around that split will need to rework them before the update lands.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026