Burp AI Agent

Active
GitHub Kotlin MIT

Description

A Burp Suite extension that adds MCP tooling, AI-assisted analysis, privacy controls, and passive or active scanning to security testing workflows.

Key Features

  • 11 AI backends — Burp AI built-in, Ollama, LM Studio, NVIDIA NIM, Perplexity, Gemini CLI, Claude CLI, Codex CLI, and more
  • 53+ MCP tools — expose Burp Suite capabilities to any MCP client for autonomous AI-driven security testing
  • 62 vulnerability classes — passive and active AI scanners covering injection, auth, crypto, and more
  • 3 privacy modes — STRICT / BALANCED / OFF to redact sensitive data before it leaves Burp
  • Custom prompt library — save reusable prompts per context (HTTP request or scanner issue) with right-click launch
  • Audit logging — JSONL with SHA-256 integrity hashing for compliance and reproducibility

Use Cases

💡 AI-assisted web security testing — analyze HTTP requests and responses for vulnerabilities using local or cloud AI models
💡 Autonomous vulnerability scanning — run passive and active scans with 62 vulnerability classes via MCP tools
💡 MCP-driven security automation — let Claude Desktop or other MCP clients drive Burp Suite for automated pentesting
💡 Secure code and config review — use AI to review proxy traffic for misconfigurations and security issues
💡 Compliance auditing — generate audit logs with integrity hashing for security testing documentation

Tags

burp-suite security mcp agent-tools kotlin

Categories

⚡ Agent Tools 🔌 MCP Tools 🛡️ Security & Guardrails

Quick Start

Download the latest JAR from GitHub Releases or build with `./gradlew clean shadowJar` (Java 21). Load in Burp Suite: Extensions > Installed > Add > Java. Configure a backend in the AI Agent tab Settings (Ollama, LM Studio, or any OpenAI-compatible provider). Right-click a request > Extensions > Burp AI Agent > Analyze this request.
Visit GitHub Visit Website

Related Projects