Business & Technology
PortSwigger launches Burp AT public beta for pentesters
PortSwigger has launched the public beta of Burp AT for professional pentesting in Burp Suite, adding agentic AI to its web security testing platform.
Burp AT is aimed at security professionals who want to use AI agents for investigative testing tasks inside Burp Suite while retaining control over what those agents can do. Pentesters can decide how much work to delegate, with scope, permissions, and approval rules enforced by Burp rather than left to the model.
The launch marks PortSwigger’s move to bring agent-based AI into a product already widely used by web application testers. Burp Suite is used by more than 90,000 security professionals and 18,000 organisations across more than 170 countries.
Burp AT allows agents to pursue defined tasks using Burp Suite’s existing tools, project context, and what PortSwigger describes as purpose-built pentesting skills. Agents can draw on information already held in a Burp project, including traffic, target structure, issues, and discoveries gathered during an engagement.
That shared context is intended to let later investigations build on earlier work rather than start from a blank prompt. Agents can also add their own findings to the project record as testing progresses.
Control model
A central part of the product is the way human testers retain oversight. Users can allow actions to proceed automatically, require approval before they continue, or block them altogether.
PortSwigger says smart approvals are designed to let routine work continue while escalating decisions that need a tester’s attention. Users can begin with tighter supervision and increase autonomy when the target, engagement rules, and the agent’s performance make that appropriate.
These controls are enforced in Burp’s tooling layer rather than through prompts or instructions given to the model. In practice, that means an agent can suggest an action but cannot carry it out if Burp does not permit it.
Agent requests and tool activity are also recorded in the Burp project. This gives testers a log they can inspect alongside other engagement evidence rather than relying only on the model’s own account of what happened.
Built on Burp
PortSwigger is positioning the product as an alternative to ad hoc workflows built around general AI coding agents, scripts, and integrations. Rather than relying on general-purpose HTTP libraries, Burp AT works through Burp Suite’s web security testing tools.
According to PortSwigger, those tools reflect more than two decades of use against real applications and can handle malformed requests, message manipulation, and protocol edge cases that often arise in professional testing. The aim is to let the model focus on deciding what to investigate and what to try next.
Burp AT also includes structured, task-specific pentesting skills developed with PortSwigger Research. These skills are intended to give agents repeatable testing approaches without requiring every user to build a methodology through prompts, scripts, or workflow instructions.
PortSwigger says the skills create a path from security research into applied testing. As new techniques are developed and validated by its research team, they can be translated into skills that agents use during engagements.
Trust question
Dafydd Stuttard, Burp Suite Creator and Chief Executive Officer of PortSwigger, framed the launch around the gap between AI demonstrations and production use on live targets.
“AI can already find vulnerabilities. The harder question is whether you can trust it against a real target. Burp AT gives the model room to reason, but Burp controls what it can actually do, executes the work through tools pentesters already rely on, and preserves the evidence. That is what turns agentic testing from an impressive demonstration into something useful on a real engagement,” said Stuttard.
The public beta is available to Burp Suite Professional users. PortSwigger plans to expand the product during the beta and use feedback from real engagements to shape its tools, skills, and workflows.
The company’s wider product portfolio spans practitioner-led testing and application security tools for larger organisations. Burp Suite DAST is used by more than 1,000 organisations to automate application security testing, while PortSwigger’s software and research are also used in strategic work with large enterprises including SAP.
Business & Technology
Network Rail will not reopen Botley Road early despite completion
Gas network company SGN confirmed it had repaired three minor gas leaks and left the site on Monday, August 3, six days earlier than expected.
The leaks were discovered during excavation works last month and contributed to the pushing back of the road’s reopening date, yet again, to September 20.
The completion of the gas mains replacement marked a significant step forward in the wider Oxford Station improvement project, which was originally budgeted at £161 million but is now expected to cost at least £237 million.
The development prompted hopes that Botley Road, closed beneath the rail bridge since April 2023, could reopen earlier than planned.
However, Network Rail has moved to manage expectations, saying the project remains on course to meet its existing target date rather than finish ahead of schedule.
A Network Rail spokesperson said: “We’re pleased that SGN has completed its gas mains replacement work.
“While this is an important milestone, it doesn’t necessarily mean the overall project will finish early as some remaining work is dependent on access to the railway, which we have had to rearrange to enable the replacement of the gas main.
“Our focus remains on meeting our planned deadline of 20 September for reopening Botley Road to traffic.”
While the completion of the gas works removes one of the most recent obstacles facing the scheme, Network Rail says further work under the bridge and around the station is still needed before the route can reopen to traffic.
Business & Technology
40-year-old Oxfordshire gymnastics club at risk of closure due to heat
The club is currently struggling in the summer heat, and has launched a new fundraiser to keep its gymnasts safe.
The club, which is based at Grove House Barn near Warkworth in Banbury, launched the fundraiser so it could buy and install four air conditioning units to keep its space cool.
Currently, the club hopes to raise £7,000 through the appeal so it can buy four 10kW air conditioning units and cover all the installation costs.
So far, the club has raised £380.
Karl Wade, director of Wade Gymnastics, said the club has become “increasingly warm” during the summer months due to the rising temperatures.
READ MORE: Thames Water leakage targets are ‘not realistic’ says boss after pay rise
Wade Gymnastics at Grove House Barn in Banbury (Image: Google Maps)
“Despite our best efforts to keep doorways and shutters open, it becomes very uncomfortable for gymnasts to play and train,” Mr Wade said.
He added: “The safety of our gymnasts and coaches is always our utmost priority.
“Unfortunately, the risk of having to close the business during these hot spells is increasing and we need to have more effective ways of keeping everyone cool.
“An air conditioning system would allow the business to stay open during those extreme hot conditions and continue to provide classes for everyone who attends.”
The gym currently delivers classes seven days a week for around 900 people, which range from toddlers to athletes competing at national level.
The gym club was founded more than four decades ago by Ruth Wade and, for the past 20 years it has been based at its current facility.
Business & Technology
Solihull Council appoints ICS.AI for AI discovery phase
SOFIAH NICHOLE SALIVIO
News Editor
Solihull Council has appointed ICS.AI to deliver the first phase of an AI Transformation Discovery programme to examine how artificial intelligence could be used across several resident-facing services.
The 24-week programme will review opportunities in Adult Social Care, Children’s Services, Economy & Infrastructure, and Public Health. It is intended to help the council decide where AI could be used and where future spending should be directed.
In this first phase, ICS.AI will assess the council’s readiness for AI and identify use cases across the four service areas. The programme is expected to produce a prioritised shortlist of about 200 use cases, including 50 validated from a finance perspective, alongside a longer-term AI Transformation Roadmap.
The work is intended to create an evidence base before any wider implementation decisions are taken. Ethics, privacy, and safeguarding will be considered throughout the assessment process.
Discovery phase
ICS.AI will use its AI Target Operating Model framework to review Solihull’s current position across five dimensions before ranking opportunities. The outputs will be based on council-owned baseline data and reviewed by public sector specialists.
The approach reflects a broader pattern among local authorities exploring AI in service delivery while facing pressure to justify spending and manage risks around data use and public accountability. Councils have also been seeking clearer business cases before committing to larger technology programmes.
Solihull said the discovery exercise would support a measured approach to service modernisation. The authority wants to identify where AI could improve services for residents while also demonstrating value for money.
“We are committed to taking a well-considered and planned approach to modernising the services we provide. By building a strong evidence base for future decisions, this programme will help us understand where the greatest AI opportunities exist. We will then be able to prioritise those improvements that will deliver the greatest benefit for residents, while ensuring full value for the council,” said Councillor Dave Pinwell, Cabinet Portfolio Holder for Resources, Solihull Council.
Public sector focus
ICS.AI said the Solihull engagement builds on work it has carried out with more than 20 public sector organisations using its AI transformation and discovery assessments. Those organisations include Derby City Council.
The company focuses on AI projects for the public sector, where interest has increased as authorities look for ways to manage demand pressures in social care, public health, and other frontline services. At the same time, councils are under scrutiny to show that new technology investments are proportionate and supported by practical evidence.
Dwayne Johnson, Chief Local Government Officer at ICS.AI, said local authorities need stronger justification before committing funds. “Local authorities need confidence that every investment is backed by robust evidence and long-term value for residents. Solihull Council is taking the right approach by starting with a structured discovery programme that builds a clear understanding of priorities before decisions are made. By developing finance-validated business cases and a practical roadmap, the council can be more proactive in the decisions it makes,” he said.
The programme’s initial outputs are expected to give Solihull a ranked view of where AI could be applied across services, the level of organisational readiness, and which projects may warrant further consideration. This first phase is focused on identifying options rather than moving directly into deployment.
For local government leaders, that distinction is becoming increasingly important as councils test AI in areas that affect vulnerable residents and essential public services. In Solihull’s case, the work spans some of the authority’s most visible functions, including care services, children’s provision, public health activity, and parts of local infrastructure planning.
The council aims to use the findings to inform later investment decisions through finance-validated business cases and a practical roadmap for future priorities.
-
Business & Technology3 weeks agoHSBC UK & Visa test AI shopping with live payments
-
Business & Technology3 weeks agoValarian lands USD $50 million backing for sovereign AI
-
Business & Technology4 weeks agoMouser warns against viral hacks to cool overheating phones
-
Oxford News4 weeks agoNew romantasy bookshop attracts queues of customers
-
Business & Technology4 weeks agoSNP & Palantir launch AI tools for SAP transformations
-
Business & Technology4 weeks agoKane tops England influencer rankings after Mexico win
-
Traffic & Transport4 weeks ago‘I felt my spine and body split’: the woman who was hit by a child on a Lime bike – and denied compensation | Ebikes
-
Oxford News4 weeks agoDWP now checking bank accounts for Universal Credit and Pension Credit
