Using AI extensions - Port Swigger
Summary: PortSwigger's Burp Suite now requires AI credits for its AI-powered extensions, with each extension's LLM interaction deducting credits from a balance purchased through My Account and tied to a Professional license. AI features are disabled by default for all extensions and must be enabled per extension via the Use AI checkbox under Extensions > Installed, and PortSwigger states it does not collect data from AI-powered extensions by default.
What you should know: PortSwigger reviews BApp Store extensions for quality and compatibility but cannot guarantee their behavior, and what data is processed depends entirely on each extension's implementation - so in regulated or legally sensitive environments the vendor itself directs you to review the extension's code and documentation before acting on AI output.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026