PortSwigger, the company behind the popular web security testing tool Burp Suite, has announced a significant advancement in application security testing with the introduction of AI-powered extensions for Burp Suite Professional. This development marks a new era in security testing automation and efficiency.
Burp AI, a new AI integration, available in Early Adopter 2025.2, allows security professionals to enhance their testing workflows through customizable AI-powered extensions.
A key feature of this implementation is the Montoya API, which enables seamless integration of AI capabilities while maintaining strict security standards within PortSwigger's trust boundary.
AI-powered extensibility in Burp Suite
Gareth Heyes, a prominent figure in the security community, has already demonstrated the potential of this technology through enhancements to the Hackvertor extension.
The updated version showcases advanced capabilities, including AI-driven custom tag creation and automatic code generation in multiple programming languages like JavaScript, Python, Java, and Groovy.
"We understand that AI in security tools raises important questions. As a long-standing and trusted vendor in the application security industry, we take your security and data seriously," states PortSwigger in their announcement. The company emphasizes that all AI interactions are securely managed within their trusted platform.
To encourage adoption and experimentation, PortSwigger is providing Burp Suite Professional users with 10,000 free AI credits. This initiative allows security professionals to explore and develop AI-powered extensions without immediate cost concerns.
The company has also released an example AI-powered extension that demonstrates practical applications, including using AI to analyze in-scope requests and determine their relationship to authentication processes.
PortSwigger is fostering community engagement through a dedicated Burp AI channel on their Discord server, where users can discuss new features and interact with Burp developers. This release represents part of a broader AI integration strategy, with more AI-enhanced features planned for upcoming releases.