Adding custom scan checks to scans - Port Swigger
Summary: PortSwigger's Burp Scanner now lets users run custom scan checks for web application or API-only scans, and any checks saved to the custom scan checks library are enabled automatically and run alongside built-in checks during the audit. Users can toggle all custom checks at once or enable specific ones by checkbox in the Scan configuration tab, and checks not saved to the library are marked with an asterisk and can be added via right-click and Save to library.
Key Takeaway: Custom checks that run automatically once saved to the library mean a scan's coverage depends on what someone added to that library - and checks loaded from a scan configuration but never saved are flagged with an asterisk, so it is worth knowing which of your custom checks actually persist across scans.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026