Scanning machines - Port Swigger
Summary: PortSwigger's documentation describes a scanning machine as a virtual or physical machine that runs Burp Suite DAST scans, with the installation wizard defaulting to running scans on the same machine as the DAST server and web server. That single-machine setup is described as suitable only for evaluation, with production use calling for as many external dedicated scanning machines as needed, each with a maximum number of concurrent scans and, for standard instances, membership in a scanning pool.
Why it matters: The default install puts the scanner, the DAST server and the web server on one machine, a configuration the vendor itself limits to evaluation - so a production deployment left on defaults is running scans against a single point of overload.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026