Configuring scans in Burp Suite Professional - Port Swigger
Summary: PortSwigger's documentation describes Burp Suite Professional scan configurations as collections of settings that define how a scan runs, set from the Scan configuration tab of the scan launcher and either built new or loaded from a configuration library. It lists four built-in presets - Lightweight (completes within 15 minutes), Fast (generally within an hour), Balanced (within a few hours), and Deep (time varies with target complexity) - plus a Custom option, and notes that since version 2025.3 loading a configuration overwrites current settings because all settings are treated as edited.
Bottom line: The preset names set expectations an operator may not check: a scan labeled Lightweight finishes in 15 minutes and Deep has no fixed duration, so coverage decisions get made by picking a label rather than reading the settings. Since 2025.3, loading a saved configuration overwrites all settings, which means a reused or imported configuration can silently replace tuning someone else established.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026