PortSwigger

The PortSwigger stand at Security BSides Las Vegas is now live - come find us! Pentesters, we've got two jam-packed days for you at BSidesLV, including… ✨ Hands-on demos of Burp AT - our new agentic AI solution built to handle the repetitive parts of testing so you can focus on the interesting bugs. 👕 Exclusive swag - we’re talking Burp Suite tees, stickers, and Burp AT transfer tattoos. 🕶️ A raffle for a pair of Meta x Oakley sunglasses, generously donated by our partners over at Meta. 🪲 A fun AI game and bug spray giveaways in collaboration with our partners at Intigriti. Fancy going deeper? Join 'Burp but Yours', a 4-hour hands-on workshop on Burp extensibility, run by Burp Suite extensibility expert Hannah L. and Burp Ambassador Tib3rius. That's two people who know the Montoya API better than almost anyone, teaching you how to bend Burp to your exact workflow. 🛠️ Drop by, ask us hard questions about Burp AT, and say hello. #BSidesLV #BurpSuite #Pentesting #AppSec #BurpAT

Burp AT brings agentic AI to human-led pentesting, with Burp’s proven tools, project context, and purpose-built skills. Explore Burp AT and get started: https://lnkd.in/eGZ-Ys7z

A capable AI model is only the starting point for trusted security testing. Models can already find and exploit vulnerabilities. But professional security testing needs more. It needs boundaries the model cannot override, reliable tools that work against real applications, specialist testing methods, and evidence a tester can inspect and stand behind. Burp AT has been built around those requirements. Agents can reason, form hypotheses and pursue promising leads, while scope and permissions are enforced outside the model. They work through Burp Suite’s proven tools and use purpose-built skills informed by PortSwigger Research. As models become more capable, the system around them matters more, not less. Read more: https://lnkd.in/gWpXaSp5

We’re off to Vegas! 😎 Come meet us at Black Hat USA, BSidesLV, and DEF CON 34 next week - plus a few bonus events along the way... Security BSides Las Vegas: drop by the PortSwigger stand, and don’t miss the 4-hour "Burp But Yours" workshop - hands-on extension and Bambda development with extensibility expert Hannah L. and Burp Ambassador Tib3rius. Black Hat USA: booth #5342 - drop by for lightning talks from our Burp Ambassadors Corey J. Ball, Katie Paxton Fear, Alan Levy, and more, along with seeing Burp’s brand new agentic AI, Burp AT, in action. Want guaranteed face time with the team? Request a meeting slot: https://lnkd.in/g4MEWSQE Then catch the PortSwigger Research team on the Black Hat USA stage: James Kettle (@albinowax) - "Can AI Do Novel Security Research? Meet the HTTP Terminator" - Wednesday 5 August, 12pm, Oceanside A. Gareth Heyes (@GarethHeyes) - "CSS: The Bomb Inside Your Inbox" - Thursday 6 August, 2:35pm, South Seas CDF. And, of course, you can raise a glass with James, Gareth, and Burp Suite creator Dafydd Stuttard at our annual Meet the Researcher drinks event - Thursday 6 August, 6pm, Centra Bar. Finally, DEF CON 34: James brings his new research back for round two, while Hannah runs two more extensibility sessions AppSec Village™ and (Bug Bounty Village, DEF CON). We are also proudly to sponsor this year's Bug Bounty Village. Throughout the week, we will also be at the C-Vision cocktail hour, Vulnerability Vibes, and CISO Poker along the way. Read the full rundown of the week here: https://lnkd.in/gBCvWPDD #BlackHatUSA #BSidesLV #DEFCON34 #AppSec #BurpSuite #BurpAT

Introducing Burp AT. Agentic AI for human-led pentesting, with Burp Suite’s proven tools, your project context and purpose-built skills. Now live in public beta for Burp Suite Professional users. AI can already find and exploit vulnerabilities. The question is no longer whether the technology is capable, but what kind of AI you can trust against systems you’re responsible for testing. Burp AT was built for that challenge. Agents pursue the tasks you hand them using Burp’s specialist tools, the context already gathered in your project and pentesting skills developed with PortSwigger Research. You decide how much work agents take on. Burp enforces scope, tool access and approval rules, not the model, while you retain control of judgment and conclusions. This is the first phase of Burp AT. Read the launch post (linked in comments) to discover what we’ve built, why we’ve built it this way and how to start using it today.

Introducing Burp AT. Agentic AI for human-led pentesting, with Burp Suite’s proven tools, your project context and purpose-built skills. Now live in public beta for Burp Suite Professional users. AI can already find and exploit vulnerabilities. The question is no longer whether the technology is capable, but what kind of AI you can trust against systems you’re responsible for testing. Burp AT was built for that challenge. Agents pursue the tasks you hand them using Burp’s specialist tools, the context already gathered in your project and pentesting skills developed with PortSwigger Research. You decide how much work agents take on. Burp enforces scope, tool access and approval rules, not the model, while you retain control of judgment and conclusions. This is the first phase of Burp AT. Read the launch post (linked in comments) to discover what we’ve built, why we’ve built it this way and how to start using it today.

PortSwigger in Vegas: Groundbreaking new research, new product innovation, and community celebration. 🎰 Packed schedules. Busy booths. Back-to-back meetings. And never quite enough time to have a proper conversation with the people you actually wanted to meet. If you're heading to Black Hat USA, BSides Las Vegas, or DEF CON, skip the queue and request time with the PortSwigger team before the week begins. Learn, discover, and upskill with PortSwigger in Vegas: 🤝 Meet the team at Black Hat - Booth 5342 🎤 Watch James Kettle and Gareth Heyes unveil brand-new research live 📈 Get hands-on with ‘Burp But Yours: Hands-on Bambda and Extension Development’ workshops at BSides LV and DEF CON 👀 Be among the first to see what we're building next Check out our full schedule, or request a meeting via the link in the comments. Not looking for a formal meeting? Come and say hello at C-Vision Cocktail Hour or Vulnerability Vibes during the week. #BlackHat2026 #BHUSA2026 #DEFCON34 #BSidesLV #BurpSuite #AppSec

PortSwigger is at BSides Leeds today! We're proud to be sponsoring this fantastic event for the second year in a row, and will be here all day chatting about everything AppSec and Burp Suite! Don't miss Vic Harkness' 'Intro to Burp Suite' on the 101 track, and swing by our stand to share how you're using Burp in your workflow - we might just have a t-shirt waiting for you... 👀 #BSidesLeeds #BurpSuite #PortSwigger

I'm very happy to announce "Can AI Do Novel Security Research? Meet the HTTP Terminator" is coming to DEF CON 34! This research was a huge gamble and the result was glorious, can't wait to share!