Exploring issues with AI - Port Swigger
Summary: PortSwigger's Burp Suite now includes Explore Issue, an AI-powered pentesting assistant that performs automated follow-up investigations on vulnerabilities already identified by Burp Scanner, selecting Burp tools, structuring and sending requests, and adjusting its approach based on target behavior. The feature generates and validates proof-of-concept exploits, can surface additional attack vectors such as privilege escalation paths or data exposure risks, requires AI credits that pause the task when exhausted, and logs every action in a Task Progress tab with options to send AI-generated requests to Repeater or Intruder for manual verification.
What's compelling: The tool only explores issues Burp Scanner has already found, so its reach is bounded by what your scanner detected in the first place. Every AI-driven step is logged and reproducible, and requests are processed within PortSwigger's trust boundary with AI providers not storing them, which is the standard a security leader should demand before letting an agent touch production targets.
Read the original at PortSwigger Research ↗
- Topics
- Zero-Days & Exploits
- Related
- New Sign Drop Exploit Can Abuse Windows Defender to Bypass Security Protections Cyber Risks · Nov 13, 2026New Sign Drop Zero-Day Exploit Turns Windows CLFS Security Feature Into SYSTEM Access Cyber Risks · Nov 12, 2026November Patch Tuesday: An Overflowing Cornucopia of CVEs Cyber Risks · Nov 10, 2026