Collaborate Disseminate
Bug bounty legend, NahamSec, has taken Burp AI for a spin. If you’re curious how Burp AI fits into a real workflow, his new video is the perfect place to start. Watch on YouTube Burp AI was built to a Continue reading Hacking smarter with Burp AI: NahamSec puts Burp AI to the test
Whether you’re navigating a client pentest or chasing a bounty target, even the most experienced testers hit roadblocks, burn time on repetitive tasks, or just want a second opinion. Burp AI is design Continue reading Welcome to AI pentesting – add on-demand AI assistance directly to your workflow with new, agentic Burp AI capabilities
Note: This is a guest post by pentester and researcher, Tom Stacey (@t0xodile). You’d think that after almost 21 years since its initial public discovery, HTTP Request Smuggling would be barely exploi Continue reading How to join the desync endgame: Practical tips from pentester Tom Stacey
Arman S., a full-time independent security researcher and bug bounty hunter, talked us through how he uses Burp Suite Professional and HackerOne in tandem to find and report high-value security vulner Continue reading How this seasoned bug bounty hunter combines Burp Suite and HackerOne to uncover high-impact vulnerabilities
Application security teams are under pressure. With expanding application estates, growing API usage, and faster release cycles, many teams struggle to keep up. Backlogs grow, releases are delayed, an Continue reading Watch the webinar: Scale secure coverage without scaling headcount
Enterprise security teams are under more pressure than ever to secure sprawling application estates, without slowing down delivery. That’s why, over the first half of 2025, we’ve delivered some of our Continue reading The year so far: How Burp Suite DAST is leveling up enterprise security in 2025
In a brand-new collaboration between ethical hacking and AppSec expert John Hammond and world-renowned security researcher James Kettle, the pair explore how tens of millions of websites are compromis Continue reading “The entire internet is broken”: ethical hacking expert John Hammond meets James Kettle
At Black Hat USA and DEFCON 2025, PortSwigger’s Director of Research, James Kettle, issued a stark warning: request smuggling isn’t dying out, it’s evolving and thriving. Despite years of defensive ef Continue reading HTTP/1.1 Must Die: What This Means for AppSec Leadership
At Black Hat USA and DEFCON 2025, PortSwigger’s Director of Research, James Kettle, issued a stark warning: request smuggling isn’t dying out, it’s evolving and thriving. Despite years of defensive ef Continue reading HTTP/1.1 Must Die: What This Means for In-House Pentesters
At Black Hat USA and DEFCON 2025, PortSwigger’s Director of Research, James Kettle, issued a stark warning: request smuggling isn’t dying out, it’s evolving and thriving. Despite years of defensive ef Continue reading HTTP/1.1 Must Die: What This Means for Bug Bounty Hunters