PortSwigger Introduces Burp AT for Enterprise Security Testing

KNUTSFORD, England, Nov. 5, 2026 /CourierPR/ -- PortSwigger, the company behind the industry-standard web security testing platform Burp Suite, has introduced a new solution called Burp AT for enterprise testing programmes. This tool aims to help security teams investigate applications more deeply and frequently, ensuring they can maintain control over the testing process while delegating tasks to agents.

Burp AT combines Burp Suite's advanced web security testing tools with purpose-built pentesting skills developed by PortSwigger Research. These tools are designed to handle complex and unusual security testing scenarios, ensuring consistent and comparable results across multiple applications. According to Chris Wood, Product Manager at PortSwigger, the solution enables security teams to pursue investigations that would otherwise be delayed, revisit applications as they change, and conduct in-depth testing more often.

The new tool allows AppSec leaders to balance testing priorities with limited expert capacity. Security teams can choose how much authority to delegate, ranging from guided investigations to autonomous execution of defined tests. Burp AT ensures that the scope and permissions are enforced deterministically, preventing agents from executing unauthorized actions. This feature maintains testing boundaries as more execution is delegated, while teams retain the ability to step in when necessary.

Tom Shelton-Lefley, another Product Manager at PortSwigger, highlighted the importance of giving agents the right tools for agentic testing.

For organizations interested in Burp AT, PortSwigger is hosting a booth at the OWASP Global AppSec USA conference in San Francisco. The event will take place on the 5th and 6th of November, where attendees can meet the PortSwigger team at booth G14. To learn more about Burp AT or to schedule a meeting with the team, interested parties can visit the official PortSwigger website.

PortSwigger's products span both practitioner-led testing and enterprise application security. Burp Suite Professional equips security professionals to investigate vulnerabilities in depth, while Burp Suite DAST helps more than 1,000 organizations automate security testing at scale. The company's mission is to enable the world to secure the web, and it is backed by a strong user base of over 90,000 security professionals and 18,000 organizations across 170+ countries.