burp-ai-agent (six2dez)
Burp Suite extension adding built-in MCP tooling, AI-assisted analysis, privacy controls, and passive/active scanning.
🛡️ AgentReady threat assessment
MAESTRO 7-layer threat model + OWASP AIVSS risk score for burp-ai-agent (six2dez), derived from its capabilities.
AIVSS 7.4 · High
View MAESTRO 7-layer threat model →Overview
burp-ai-agent is a Burp Suite extension that adds built-in MCP tooling plus AI-assisted analysis, privacy controls, and both passive and active scanning. It aims to embed agentic capabilities directly in the Burp workflow with guardrails around what data leaves the tool. The combination of active scanning and LLM data handling defines its security surface.
Key features
- Built-in MCP tooling in Burp
- AI-assisted request/response analysis
- Privacy controls plus passive/active scanning
Use cases
- AI-assisted analysis inside Burp
- Passive and active scanning with agent help