Deploying additional scanning machines - Port Swigger
Summary: PortSwigger's guidance for Burp Suite DAST recommends deploying one or more dedicated scanning machines for production use, since running scans on the DAST server machine may degrade performance. Each new scanning machine is set up with the same installer used for the initial DAST installation, generates a unique fingerprint sent to the DAST server as an authorization request, and is authorized only after the administrator compares that fingerprint with the one generated during setup, with communication between machines protected by mutually authenticated TLS.
What you should know: A single DAST license covers any number of scanning machines and scans, but separate instances in test, development, or staging environments each require their own license - a cost that depends on how many environments you stand up.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026