Scanning pools for self-hosted instances of Burp Suite DAST - Port Swigger

Summary: PortSwigger documented scanning pools for self-hosted Burp Suite DAST, which let administrators group scanning machines and sites so a scan only runs on a machine in the same pool. The feature is limited to standard (non-Kubernetes) instances, each machine and each site must belong to a pool, and CI-driven scans cannot be allocated to pools.
Why it matters: If a site and its scanning machines sit in different pools, that site cannot be scanned at all - a configuration detail that can quietly stall coverage for a team or a restricted-access site.

Read the original at PortSwigger Research ↗

Topics: Vulnerabilities & Patching
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026