six2dez/burp-ai-agent
Some data may be outdated — see provenance labels.
Burp Suite extension that adds built-in MCP tooling, AI-assisted analysis, privacy controls, passive and active scanning and more observed · 2026-09-29
Health v2 · maintenance only
77/100
- Activity 92
- Release rhythm 92
- Longevity 19
How is this computed?
round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-10-21. Adoption (stars, forks) is never an input.
- gap_med: 9
- age_days: 266
- days_rel: 59
- days_push: 48
- n_releases_24m: 18
Adoption not part of the score
1517 stars · 226 forks observed · 2026-09-29
What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded
Custom AI Agent (formerly Burp AI Agent) is a Burp Suite extension written in Kotlin that integrates LLMs into web security workflows via local or cloud AI backends. It provides AI-assisted chat, passive and active AI scanning, privacy redaction modes, and a built-in MCP server so external AI agents can drive Burp tools.
Use cases
- integrate AI into my Burp Suite pentesting workflow
- connect Claude or Gemini CLI to Burp Suite via MCP
- run an AI passive scanner on web traffic during bug bounty hunting
- use local Ollama models for AI-assisted vulnerability analysis
- redact sensitive data like session cookies before sending requests to LLMs
- let an external AI agent create Burp issues and run scans
- chat with an LLM about HTTP requests captured in Burp
When to choose
- you already use Burp Suite and want AI assistance without leaving the proxy
- you want external AI agents (Claude Code, Gemini CLI, etc.) to control Burp via MCP
- you need privacy controls and redaction when sending traffic to AI backends
- you want to use local models like Ollama or LM Studio for security analysis
When to avoid
- you don't use Burp Suite for web security testing
- you need a fully autonomous scanner with no human approval of AI tool calls
- you cannot accept that recent 0.9.x releases had critical security advisories requiring credential rotation
- you need Burp Pro-only features like the passive scanner on Community Edition
Facets
plugin · maturity stable
mcp security llm-inference agent-framework chatbot developer-tools security penetration-testing large-language-models web-development developer-tools cross-platform jvm burp-suite burp-extension bugbounty pentesting appsec web-security kotlin ollama passive-scanning active-scanning privacy-redaction ai-agents desktop
6 sources
- readme: https://github.com/six2dez/burp-ai-agent · fetched 2026-09-29 · 5546173049b3
- homepage: https://burp-ai-agent.six2dez.com/ · fetched 2026-08-29 · ecb3c5868730
- site_page: https://burp-ai-agent.six2dez.com/getting-started/first-run-checklist · fetched 2026-08-29 · b19c9c95edb4
- site_page: https://burp-ai-agent.six2dez.com/getting-started/installation · fetched 2026-08-29 · 6e566a8c8d44
- site_page: https://burp-ai-agent.six2dez.com/getting-started/quick-start · fetched 2026-08-29 · 6eab9432716b
- site_page: https://burp-ai-agent.six2dez.com/reference/faq · fetched 2026-08-29 · e12f48a48ba2
Member repositories
| Repository | Role | Health v2 |
|---|---|---|
| six2dez/burp-ai-agent | main | 77 |
For agents
markdown · JSON · MCP: product_card(name="six2dez/burp-ai-agent")
Data as of 2026-10-19T08:05:51.212177+00:00 · Report a problem