Introducing Burp AT at enterprise scale: deeper testing across your applications | Port Swigger
Summary: PortSwigger released Burp AT for enterprises, extending its agentic pentesting tool beyond Burp Suite Professional, where it launched in July 2026, to scheduled autonomous tests across a whole application estate. The company says scope and permissions are enforced by the tooling layer rather than the model, so agents cannot take actions the tooling does not permit, such as executing code, and teams can stop, steer and review the evidence behind findings.
What you should know: The pitch rests on a single control claim: the boundaries hold because Burp's tooling enforces them, not the model. If your testing program delegates execution to agents, that distinction is the thing to verify before you point them at production applications.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026