Published file metadata, source observations, indicators, and research history in one bounded catalog.
Sources represented on this page. Publication and observation dates describe the content; successful batch dates describe local collection. A recent batch does not certify complete coverage or current provider availability.
1 sources: 0 stale, 0 needing attention, 0 paused, 1 unverified.
Stale means older than twice the recorded collection interval, with a minimum of one hour; without an interval, the threshold is 24 hours. Cached content remains available while a feed is stale, paused, or unverified.
In 2025, we set out with a simple mission: take Burp Suite on the road and meet the global AppSec community where you are. Burp On Tour was born from our desire to learn from you; the brilliant people
First reported Dec 12, 2025 11:34 UTCCatalog metadata updated Oct 08, 2026 03:48 UTCOpen evidence recordGrowing our Burp Ambassador community Meet our newest Burp Ambassadors Katie Paxton-Fear Malek Mohammad Yogesh Tantak James Lester Looking ahead Interested in getting involved? Growing our Burp Ambass
First reported Jul 17, 2026 13:35 UTCCatalog metadata updated Oct 08, 2026 03:48 UTCOpen evidence recordWe already know AI can find vulnerabilities. James Kettle, PortSwigger's Director of Research, wanted to answer a harder question: can an autonomous system invent genuinely new attack techniques? To f
First reported Aug 12, 2026 09:04 UTCCatalog metadata updated Oct 08, 2026 03:48 UTCOpen evidence recordNow that the dust has settled on Mythos dropping, there is space for more considered reflection on the direction of travel. Mythos wasn't a surprise; it's another data point on a trajectory that's bee
First reported May 12, 2026 14:18 UTCCatalog metadata updated Oct 08, 2026 03:48 UTCOpen evidence recordEnterprise security teams are under more pressure than ever to secure sprawling application estates, without slowing down delivery. That's why, over the first half of 2025, we've delivered some of our
First reported Aug 28, 2025 12:07 UTCCatalog metadata updated Oct 08, 2026 03:48 UTCOpen evidence recordAt Black Hat USA 2025 and DEF CON 33, PortSwigger's Director of Research, James Kettle, unveiled new HTTP desync techniques that prove one thing beyond doubt: HTTP/1.1 is broken, and every organizatio
First reported Oct 09, 2025 14:06 UTCCatalog metadata updated Oct 08, 2026 03:48 UTCOpen evidence recordWe’re proud to announce that PortSwigger recently won the Overall Judges’ Award at the Northern Tech Awards 2026. The Northern Tech Awards are run by GP Bullhound, the tech advisory and investment fir
First reported Apr 28, 2026 10:42 UTCCatalog metadata updated Oct 08, 2026 03:48 UTCOpen evidence recordWatch the webinar recording: Burp Suite DAST x Burp Suite Professional: Better Together I'm a firm believer that if you want to understand how secure an application really is, you have to test how it
First reported Mar 12, 2026 12:02 UTCCatalog metadata updated Oct 08, 2026 03:48 UTCOpen evidence recordWhat happens when you set Burp AI loose on a deliberately vulnerable web app? In his latest video, Tib3rius takes Burp’s new agentic Burp AI capabilities for a spin - and the results are seriously coo
First reported Oct 22, 2025 12:59 UTCCatalog metadata updated Oct 08, 2026 03:48 UTCOpen evidence recordAt Black Hat USA and DEFCON 2025, PortSwigger's Director of Research, James Kettle, issued a stark warning: request smuggling isn't dying out, it's evolving and thriving. Despite years of defensive ef
First reported Aug 06, 2025 22:23 UTCCatalog metadata updated Oct 08, 2026 03:48 UTCOpen evidence recordSenior pentesters have a deeply refined intuition about what is vulnerable in an environment. The problem? That expertise is often siloed with an individual and trapped in their notes or Python scripts.
First reported May 01, 2026 06:52 UTCCatalog metadata updated Oct 08, 2026 03:48 UTCOpen evidence recordWhether you’re navigating a client pentest or chasing a bounty target, even the most experienced testers hit roadblocks, burn time on repetitive tasks, or just want a second opinion. Burp AI is design
First reported Sep 24, 2025 14:17 UTCCatalog metadata updated Oct 08, 2026 03:48 UTCOpen evidence recordThe latest Hacker-Powered Security Report from HackerOne makes one thing clear: AI-assisted pentesting isn't a future trend; it's today's reality. In HackerOne's 2025 report, 70% of surveyed researche
First reported Oct 07, 2025 13:17 UTCCatalog metadata updated Oct 08, 2026 03:48 UTCOpen evidence recordNote: This is a guest post by pentester Julen Garrido Estévez (@b3xal). Methodology Key results Examples Key learnings Prompt template A pentester's POV on Burp AI Pentester Julen Garrido Es
First reported Jan 16, 2026 00:00 UTCCatalog metadata updated Oct 08, 2026 03:48 UTCOpen evidence recordThe 2026 Burp Suite Extension Awards Best Recon & Discovery Best Auth & Access Control Best Workflow & Manipulation Best API & Specialist Testing Hidden Gem Most Nominated The talks In
First reported Jun 19, 2026 12:18 UTCCatalog metadata updated Oct 08, 2026 03:48 UTCOpen evidence recordApplication security teams are under pressure. With expanding application estates, growing API usage, and faster release cycles, many teams struggle to keep up. Backlogs grow, releases are delayed, an
First reported Sep 04, 2025 14:21 UTCCatalog metadata updated Oct 08, 2026 03:48 UTCOpen evidence recordA filename, label, or report mention alone does not establish maliciousness. Observation dates describe cited sources; collection dates describe this local metadata catalog. No malware samples are stored, fetched, or executed by these pages.