BurpSuite
Web vulnerability scanner — the standard for testing the web layer of AI applications.
What it does
PortSwigger's industry-standard web application security testing platform. Provides intercepting proxy, vulnerability scanner, and extensible testing framework for web applications.
Security relevance
AI applications are web applications. Every LLM-powered product has an HTTP layer that can be tested with traditional AppSec tools. BurpSuite is essential for testing the web surface of AI applications — API endpoints, authentication, session management, and the interaction layer between users and LLM backends.
When to use it
Use alongside AI-specific tools to test the full attack surface of LLM-powered applications. The AI-specific red teaming tools test the model layer; BurpSuite tests everything around it. Most AI security assessments should include both.
OWASP coverage
Risks addressed — mapped to both OWASP Top 10 standards. 1 in LLM, 1 in Agentic.
The raw record
What Yuntona stores. Single source of truth — fork it on GitHub.
name: BurpSuite slug: burpsuite type: Mixed category: AI Red Teaming url: https://portswigger.net/burp reviewed: 2026-04 added: 2026-04 updated: 2026-04 risks: llm: [LLM02] asi: [ASI05] complexity: Guided Setup pricing: — audience: Red Team lifecycle: [develop] tags: [AppSec, Scanner, Web Sec]