Single vs. multi-machine architecture - Port Swigger
Summary: PortSwigger's documentation states that all Burp Suite DAST components, including the embedded database, can run on a single machine, but that setup is only suitable for evaluation and is not recommended for production because it may degrade performance. For production, the guidance is to connect to an external database and run scans on dedicated scanning machines, which allows the number of concurrent scans to scale indefinitely, while the DAST server and web server are always deployed on a single machine.
Why it matters: Running the scanner on one box with its embedded database caps what you can test and risks slower scans, while the multi-machine design is what lets concurrent scan volume grow without a fixed ceiling.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026