PortSwigger’s Burp AI Leads the Way in HackerOne’s Latest Security Insights

67% of security researchers now incorporate AI into their workflows, with Burp AI emerging as a top AI tool, signaling a major shift in the evolution of pentesting.

PortSwigger, the developer of Burp Suite, announced that Burp AI has been recognized in HackerOne’s latest Hacker-Powered Security Report as one of the most widely used AI tools among security researchers. This reflects a broader industry trend: penetration testing is increasingly AI-augmented, and Burp AI is at the forefront of this transformation.

Key Findings from HackerOne’s Report

  • Mainstream AI adoption: 67% of researchers use AI and automation to accelerate testing workflows.
  • Burp AI as a leader: Burp AI adoption is growing approximately 25% month over month.
  • Human-in-the-loop: Only 12% of researchers believe AI will replace humans; most see it as an assistant for deeper impact.
  • Authorization focus: IDOR reports increased 116% over five years, Improper Access Control by 66%, while XSS plateaued.

A Hybrid Future for Security Testing

The report indicates that AI and automation raise the baseline by addressing common issues like reflected XSS, but complex flaws such as broken access controls and business logic vulnerabilities still require human expertise. The future of web security is a hybrid approach: AI-assisted testing complemented by skilled manual testers.

Burp AI: Designed for a Hybrid Future

  • Enables testers to focus on high-value work by automating repetitive tasks like recon, payload testing, and PoC scaffolding through an AI assistant integrated with Burp Suite Professional.
  • Augments tester expertise and intuition with AI-driven tools for maximum impact and efficiency.
  • Extends automation into challenging areas, such as broken access controls, without overwhelming teams with false positives.
  • Maintains human control with secure, transparent AI assistance, allowing optimization of workflows without disruption.

Dafydd Stuttard, CEO and founder of PortSwigger, stated: “HackerOne’s data validates what we’ve seen firsthand: AI helps testers reclaim hours per engagement and reinvest that time in tasks requiring human attention. Burp AI amplifies testers’ capabilities while keeping humans in control, ensuring reliability and trust.”

Why This Matters

Organizations adopting Burp AI and AI-augmented workflows can:

  • Deliver higher-value findings by focusing on complex flaws instead of repetitive tasks.
  • Increase efficiency, reduce false positives, and accelerate recon for faster testing.
  • Stay ahead of attackers using industry-leading AI tools.
  • Attract and retain top security talent by providing cutting-edge tools that enhance tester impact.

For the latest cybersecurity and technology updates, visit Itech360Hub.