System requirements for self-hosted scanning machines - Port Swigger

Summary: PortSwigger published system requirements for self-hosted scanning machines running a Cloud instance of Burp Suite DAST, with specifications scaled to the number of concurrent scans. Minimum specs start at 2 CPU cores, 4 GB RAM, 30 GB free disk and 6 GB swap for one concurrent scan, while larger, more dynamic targets are recommended 4 cores, 8 GB RAM, 30 GB disk and 10 GB swap for the same single scan.
What's compelling: At 10 concurrent scans, the recommended specification reaches 40 CPU cores, 80 GB RAM and 210 GB of disk, so capacity planning for scanning infrastructure has to be sized against the scan targets rather than a single baseline machine.

Read the original at PortSwigger Research ↗

Topics: Vulnerabilities & Patching
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026