burp-ai-agent (six2dez)
Burp Suite extension adding built-in MCP tooling, AI-assisted analysis, privacy controls, and passive/active scanning.
🛡️ AgentReady threat assessment
MAESTRO 7-layer threat model + OWASP AIVSS risk score for burp-ai-agent (six2dez), derived from its capabilities.
These scores are auto-generated from public information (the agent's own listing, docs, and repository) using the canonical OWASP AIVSS formula and the MAESTRO framework — an estimate for guidance, not a penetration test, audit, or certification. See the scoring methodology — every score is re-derived by the same automated method as an agent's public evidence changes.
Overview
burp-ai-agent is a Burp Suite extension that adds built-in MCP tooling plus AI-assisted analysis, privacy controls, and both passive and active scanning. It aims to embed agentic capabilities directly in the Burp workflow with guardrails around what data leaves the tool. The combination of active scanning and LLM data handling defines its security surface.
Key features and capabilities
- Built-in MCP tooling in Burp
- AI-assisted request/response analysis
- Privacy controls plus passive/active scanning
Use cases
- AI-assisted analysis inside Burp
- Passive and active scanning with agent help