DAST 2026.11
This release makes the View site page load faster, and fixes bugs in retests and crawling. Other improvements We made the following improvements: Faster site pages. The View site page now loads faster
This release makes the View site page load faster, and fixes bugs in retests and crawling. Other improvements We made the following improvements: Faster site pages. The View site page now loads faster
This release lets you track security issues in GitHub, shows issue evidence as timestamped cards, and fixes a number of bugs. Track security issues in GitHub You can now raise and track Burp Suite DAS
This release lets you scan APIs from Burp XML and HAR files, and makes it clearer which URL to enter for a GraphQL API. Scan APIs from Burp XML and HAR files You can now create an API site from a Burp
This release adds ServiceNow ticketing, expands API scan coverage, and helps scans run more reliably with less memory. Track security issues in ServiceNow Connect Burp Suite DAST to ServiceNow to rais
This release enables you to send requests and responses to Burp AT from more Burp tools, making it easier to bring evidence from your manual testing into a task. We've also fixed an issue that caused
This release enables you to send requests and responses to Burp AT from more Burp tools, making it easier to bring evidence from your manual testing into a task. We've also fixed an issue that caused
This release introduces support for HTTP Digest authentication, improves notifications and BApp restrictions, fixes several bugs, and updates Burp's browser. HTTP Digest authentication support We've r
This release upgrades Burp's browser to Chromium 154.0.8037.98 for Windows & macOS and 154.0.8037.97 for Linux. For more information, see the Chromium release notes.
This release lets you apply triage decisions to matching issues, adds issue retests to the GraphQL API, makes scans faster, and fixes a number of bugs. Apply triage decisions to matching issues with i
This release adds the ability to export SMTP Collaborator interactions as email files, expands hotkey and title bar customization, and improves command palette performance. It also includes a range of
This release adds the ability to export SMTP Collaborator interactions as email files, expands hotkey and title bar customization, and improves command palette performance. It also includes a range of
This release adds the option to download issues as a CSV file from the Issues tab. For more information, see Managing issues in Burp Suite DAST. It also includes security fixes. Java update We updated
This release adds an MCP server for working with scans and issues from your preferred AI client, and makes Burp AI available to all Cloud customers. Work with Burp Suite DAST from your AI client Conne
This release adds customisable title bar actions, multiple evidence items for manually created issues, and evidence highlighting for issues raised by Burp AT. It also includes bug fixes and a Java upd
This release includes performance and logging improvements.
This release fixes an issue where Burp AT could incorrectly display a license error when it was unable to refresh your session.
Track vulnerabilities throughout their lifecycle Burp Suite DAST now gives every vulnerability a persistent identity that carries across scans. Instead of treating findings as isolated scan results, D
This release fixes an issue where scans initiated via Burp AT would fail to resume after Burp was restarted. We've also upgraded Burp's browser to Chromium 150.0.7871.187 for Windows & Mac and 150
This release introduces Burp AT, an agentic AI-driven capability for Burp Suite Professional that pursues the testing goals you set using Burp's own tools. Introducing Burp AT Burp AT enables you to e
This release introduces the beta of Burp's new agentic pentesting solution: an AI-driven capability for Burp Suite Professional that pursues the testing goals you set using Burp's own tools. Introduci
This release adds wildcard and IPv6 support to the proxy exclusion list and support for the new scanner update filename format, as well as a security fix. Use wildcard and IPv6 entries in the proxy ex
This release updates the bundled Java runtime to Java 26. It also includes improvements to Burp Scanner and a range of bug fixes. Bug fixes We've fixed the following bugs: An issue where generated per
This release enables you to set the Negotiate auth scheme and SPNEGO encoding options when you configure NTLM credentials for site configurations and upstream proxy settings. These options are availab
This release enables you to route traffic through your corporate proxy while keeping internal integrations reachable, and fixes issues affecting self-hosted Windows scanning machines and scope rule co
This release fixes a high-impact vulnerability in browser-based crawling of malicious websites on Windows. We'd like to thank bug bounty hunter Masahiro Kawada (@kawakatz) for reporting this. We've al
This release adds new API discovery integrations for Azure and Apigee, and gives you finer control over which HTTP methods get scanned when APIs auto-sync. Discover APIs from Azure API Management You
This release introduces a combined installer for Burp Suite Professional and Community Edition, greater extension control over HTTP traffic, Markdown support in Notes, and collection-level notes in Or
This release fixes a bug that prevented macOS users from running Bambdas.
This release introduces a combined installer for Burp Suite Professional and Community Edition, greater extension control over HTTP traffic, Markdown support in Notes, and collection-level notes in Or
This release adds advanced scope control, and automatic updates for your API sites. Use advanced scope control to precisely target your scans You can now define scan scope rules using regex patterns o