● Covered by 1 source · 1 reportMedium impact1 neutral
PortSwigger launches Burp AT public beta for agentic AI in pentesting
Key points
- PortSwigger released Burp AT public beta.
- Burp AT integrates agentic AI into Burp Suite for pentesting.
- Pentesters define tasks and maintain control over AI agents.
- A deterministic control layer enforces scope and rules for AI actions.
Agentic AI for Pentesting
PortSwigger, known for its web security testing platform Burp Suite, has launched the public beta of Burp AT. This new product introduces purpose-built agentic AI capabilities to professional penetration testing within the Burp Suite environment.
Pentester-in-the-Loop Approach
Burp AT's agentic system allows AI agents to execute defined investigative tasks using Burp Suite's tools, guided by relevant context from the project codebase. The system is designed with a "pentester-in-the-loop" model, where human pentesters determine the scope of work for the agents, and Burp enforces permissions, scope, and approval rules.
Dafydd Stuttard, CEO of PortSwigger, emphasized that trust in this approach comes from the professional tools, methodology, and enforced boundaries around the AI model, rather than solely trusting the model itself. He stated, "agents propose, Burp enforces, and the pentester decides."
Deterministic Control Layer
Burp AT incorporates a deterministic control layer that governs agent actions by default. Whenever an agent requests an action, it passes through this layer, which enforces scope, tool access, and approval rules. All requests and tool activity are recorded within the Burp project, ensuring oversight and accountability.
✨ This summary was generated by AI from the outlets' reporting listed below. It is not independently verified and may contain errors — check the original sources. How BrevFeed works →
The daily brief
One email each morning: the day's tech stories, clustered across outlets and summarized. No account needed.
One email a day. Unsubscribe in one click, any time.
Today's brief
Spend a few minutes, get the whole day. Every topic's top stories in one hands-free rundown — listen, watch, or read the transcript.
▶ Play today's brief
New every morning, and the back catalogue is archived by date.
Reporting from
PortSwigger released the public beta of Burp AT, a new product integrating agentic AI into its Burp Suite platform for professional penetration testing. This development allows AI agents to perform investigative tasks within defined scopes, with human pentesters retaining control over judgment and conclusions.