The deployment of Burp AT by PortSwigger is now available for enterprise clients, introducing an agentic pentesting solution designed to enable security teams to examine critical applications with greater frequency and depth.
This solution integrates specialized Burp utilities, pentesting proficiencies crafted alongside PortSwigger Research, and pertinent application information. The agents involved in this process formulate their testing methodologies, utilize Burp’s web security testing instruments, and modify their actions based on what they discover during execution. For Application Security leaders who must reconcile testing requirements against constraints on expert personnel, Burp AT assists teams in carrying out security assessments.
This offering addresses the operational challenge of scaling security validation efforts while maintaining rigor, reflecting a broader industry movement toward automating complex security tasks.
Why it matters
This tool addresses the challenge of limited expert capacity for AppSec leaders. It offers a scalable way to execute deep application security investigations using automated agents. Operators should watch how this impacts the efficiency of vulnerability discovery.






