Configuring site and scan data settings - Port Swigger
Summary: PortSwigger's documentation describes settings in Burp Suite DAST that control how sites and scan data are managed, including creating new sites for API-generated scans and changing the criteria that identify issues as new. Administrators can set automatic deletion of old scans to a period from 1 day up to 5 years, and the product always retains the most recent scan even if it is older than that threshold.
What you should know: A retention window of up to 5 years means scan history and the findings in it can outlive the staff who reviewed them, while the guaranteed keep of the most recent scan means a stale result can persist indefinitely as the current record.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026