PortSwigger releases Burp AT for enterprise agentic pentests
Original title: PortSwigger’s Burp AT lets enterprises delegate pentests with defined limits
Teams set scope and autonomy in advance, and Burp enforces those limits rather than the model.
PortSwigger announced Burp AT for enterprises, an agentic pentesting product that uses Burp tools and research-built skills to test applications more often. Security teams choose how much authority to delegate, from guided investigations to autonomous execution of defined tests. Burp deterministically enforces configured scope and permissions, and experts review evidence before deciding which weaknesses to address.
- Agents plan tests, use Burp tools and adapt as they learn.
- An orchestration layer ties tools to defined pentesting methodologies.
- Teams can stop a run and inspect what the agent is doing.
- Product managers Chris Wood and Tom Shelton-Lefley described the release.
- Vendors
- PortSwigger
- Organizations
- PortSwigger Research
From the original article
2 min read at helpnetsecurity.comPortSwigger has announced the availability of Burp AT for enterprises, an agentic pentesting solution that helps security teams investigate important applications more deeply and more often. Burp AT combines specialist Burp tools, purpose-built pentesting skills developed with PortSwigger Research, and relevant application context.
By Industry News · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.