PortSwigger Launches Burp AT Agentic Pentesting for Enterprises
Knutsford – November 05, 2026 -- PortSwigger, the company behind Burp Suite, has made Burp AT available to enterprises. The agentic pentesting product lets security teams delegate anything from guided investigations to autonomous execution of defined tests, while Burp's tooling layer, not the AI model, enforces scope and permissions.
Burp AT gives AI agents professional pentesting tools and research-led methods
Burp AT combines specialist Burp tools, pentesting skills developed with PortSwigger Research, and application context. Agents plan their testing approach, use Burp's web security testing tools, and adapt as they learn. The tools are built to handle the malformed traffic and unusual behaviour inherent to security testing.
An orchestration layer ties the tools into a complete test, and agents follow defined pentesting methodologies. PortSwigger says this produces consistent, comparable results across every application tested.