Role-based access control - Port Swigger
Summary: PortSwigger's Burp Suite DAST uses role-based access control, letting administrators manage user permissions through roles and groups after users are added. Groups can be configured to provide vertical segregation, where some users initiate scans while others only view results, and horizontal segregation, where users' permitted actions are restricted to specific sites.
Why it matters: The same scanner that finds your vulnerabilities holds the findings, and this model lets you decide who can launch scans versus who can only read results, and which sites each group can touch at all.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026