# Custom AI Agent

A Burp Suite extension that integrates AI into a security testing workflow, adding built-in MCP tooling, AI-assisted analysis, and AI-driven passive and active vulnerability scanning alongside manual testing.

Custom AI Agent, formerly Burp AI Agent, is a Burp Suite extension that brings AI into a security researcher's workflow. It can use local models or cloud providers, connects external AI agents to Burp through built-in MCP tooling, and runs passive and active scanners that use AI to help find vulnerabilities while the tester focuses on manual testing.

Version 1.0.0 is its first stable release, following a security review of earlier 0.9.x releases that found and fixed critical defects, including an MCP access-control gap and session cookies reaching AI backends unredacted, and it now requires approval before an AI-suggested tool call reaches Burp. It is written in Kotlin and licensed under MIT.

Website: https://burp-ai-agent.six2dez.com/