Covers: Vulnerabilities & PatchingSupply Chain & AppSecIdentity & Access ManagementData BreachesAI SecurityEndpoint & Network SecurityCloud SecurityZero-Days & ExploitsGovernance, Risk & CompliancePrivacy
PortSwigger released Burp Suite Professional/Community 2026.1.3 on 13 February 2026, replacing the old Learn tab with a Discover tab and adding command palette navigation for jumping to specific locations in most tables. The release also filters out false...
PortSwigger released Burp Suite Professional / Community 2026.2 on 13 February 2026, adding Organizer collections with encrypted-link sharing in Professional, a split request and response view in Intruder, and Proxy search. The release also includes...
InQL is a Burp Suite extension from Doyensec, now at version 6.1.2 and last updated 16 February 2026, built to assist GraphQL security testing. Its main tool is a customizable scanner that analyzes a GraphQL endpoint or a local introspection schema file,...
PortSwigger's BApp Store lists a Burp Suite extension, version 2.4.0, by Tobias Hort-Giess, Emanuel Duss and Compass Security, last updated 16 February 2026, that simplifies copying HTTP requests and responses during penetration tests and security...
PortSwigger released Burp Suite Professional and Community 2026.1.4 as a stable build on Tuesday, 17 February 2026 at 10:28 UTC. The release fixes an issue that prevented some extensions from loading correctly. What's compelling: Burp extensions are how...
PortSwigger released Burp Suite Professional and Community 2026.2.1 as an Early Adopter build on Tuesday, 17 February 2026 at 10:29 UTC. The release fixes an issue that prevented some extensions from loading correctly. What's compelling: Extensions are...
Autorize is a Burp Suite extension, authored by Barak Tawily of AppSec Labs and listed at version 1.9.4 with a last update of 24 February 2026, that detects authorization and authentication enforcement gaps in web applications. It monitors traffic from a...
SAML Raider is a Burp Suite extension for testing SAML infrastructures, built around two functions: manipulating SAML messages and managing X.509 certificates. Version 2.5.2, authored by Roland Bischofberger, Emanuel Duss and Tobias Hort-Giess, splits into...
PortSwigger released Burp Suite Professional and Community 2026.2.2 as an Early Adopter build on Tuesday, 24 February 2026 at 10:53 UTC. The release fixes a bug that was causing Burp Scanner to make unnecessary requests. What's compelling: Burp Scanner's...
PortSwigger released Burp Suite Professional and Community 2026.1.5 as a stable release on Tuesday, 24 February 2026 at 10:53 UTC. The release fixes a bug that was causing Burp Scanner to make unnecessary requests. What's compelling: A scanner that issues...
PortSwigger's BApp Store lists a Burp Suite extension by Nick Coblentz, version 0.0.1, that adds a context menu option to calculate and apply anomaly ranks to selected HTTP requests. The rank is computed with Burp's built-in ranking utilities and written...
PortSwigger lists a Burp extension called Burp to Discord, authored by Thomas Stacey at version 1.0.0 and last updated 26 February 2026, that forwards issues to a Discord webhook as they are detected. The extension listens for issues from any source and...
Saver Logger is a Burp Suite extension, authored by Sachhit Anasane at version 1.0.0 and last updated 26 February 2026, that automatically logs all HTTP requests across Proxy, Scanner, Repeater, Intruder, and other tools. It captures metadata including...
Packet Purifier is a Burp Suite extension, version 1.2.0 by author Isacaya, that identifies which request elements - parameters, cookies, and headers - influence server responses. It sends multiple baseline requests to establish expected behavior, then...
PortSwigger released Burp Suite Professional and Community Edition 2026.2.3 on 4 March 2026, adding Organizer collections with encrypted-link sharing in Professional, a split request and response view in Intruder, and Proxy search. The release also...
PortSwigger announced a collaboration with bug bounty platform Intigriti in which top-performing researchers can earn a free 6-month Burp Suite Professional license by reaching 400 reputation points, limited to one license per year. The companies said the...
PortSwigger released Burp Suite Professional/Community 2026.3 on 12 March 2026, adding support for custom CA certificates, host-level SOCKS proxy bypass, and the option to hide decoded hover tooltips, along with bug fixes. The custom CA feature lets users...
PortSwigger's Dafydd Stuttard argues that DAST tools bundled into all-in-one AST platforms were built separately from the manual pentesting workflows they feed, so findings arrive in a different tool's taxonomy and evidence model and must be translated...
PortSwigger guest researcher Julen Garrido Estévez published a walkthrough of the 0.CL HTTP request smuggling technique, in which a front-end reads "Content-Length: 0" while the back-end parses the following bytes differently, letting one request absorb...
PortSwigger released Burp Suite Professional and Community 2026.2.4 as a stable build on Wednesday, 25 March 2026 at 08:33 UTC. The release upgrades Burp's browser to Chromium 146.0.7680.154 for Windows and Mac and 146.0.7680.153 for Linux. What's...
PortSwigger released Burp Suite Professional and Community 2026.3.1 as an early adopter build on Wednesday, 25 March 2026 at 08:34 UTC. The release upgrades Burp's browser to Chromium 146.0.7680.154 for Windows and Mac and 146.0.7680.153 for Linux. What's...
PortSwigger released ReportLM, a Burp Suite extension (version 1.0.2, authored by Tom SL) that uses Burp AI to generate custom reports from issues identified by Burp Scanner. Users add issues by right-clicking and selecting "Add to ReportLM," review and...
PortSwigger's BApp Store lists a third-party extension called Header Change Notifier, version 2.1.0, by author MohamedXploit, last updated 30 March 2026. It uses passive scanning to track security-critical HTTP response headers across browsing sessions to...
PortSwigger's BApp Store lists a third-party extension called Quick Update Headers, version 1.0.0, that refreshes individual headers in a Repeater or Intruder request with the latest values from the same host in the Proxy History. Its stated common use...
A third-party Burp Suite extension called Gitleaks Integration, authored by Arqsz and at version 0.7.1, adds Gitleaks-based secret detection to Burp Scanner's passive scanning workflow. It scans HTTP responses for hardcoded secrets such as API keys,...
PortSwigger announced a partnership with Meta Bug Bounty that combines Burp Suite Professional access with the Web Security Academy's learning pathways for bug hunters. The program targets researchers in HackerPlus Silver leagues on Meta Bug Bounty, and...
PortSwigger released Burp Suite Professional/Community 2026.3.2 on 8 April 2026, adding custom CA certificate support under Settings > Network > TLS > Custom CA certificates, host-level SOCKS proxy bypass, and the ability to hide decoded hover tooltips....
PortSwigger released Burp Suite DAST 2026.3.1 as a stable release on Thursday, 9 April 2026 at 14:35 UTC. The release fixes an issue where Burp DAST could fail to detect newer scanner builds during update checks. What's compelling: A scanner that misses...
PortSwigger launched an official Burp Ambassador Program, a community initiative to work more closely with experienced Burp users and support the work they already do. The first ambassadors named are Alan (Buenos Aires-based consultant and founder of Bug...
PortSwigger released Burp Suite Professional and Community Edition 2026.3.3 as a stable build on Tuesday, 21 April 2026 at 13:34 UTC, with downloads for JAR, Linux (ARM and x64), macOS (Apple silicon and Intel), and Windows (ARM and x64). The release...