Chat & Sessions

The chat interface is the primary way to interact with AI backends directly within Burp Suite.

Sessions

Each chat session is an independent conversation with the AI. Sessions store:

• Title: Auto-generated from the first prompt or the context menu action used.

• Creation time: Timestamp for reference.

• Backend: The AI backend that was active when the session was created.

Parallel Sessions

You can have multiple sessions open simultaneously, each using a different backend. For example:

• Session 1: Claude analyzing a complex authentication flow.

• Session 2: Ollama (local) doing quick recon on API endpoints.

Switch between sessions using the session list in the left sidebar.

Chat Interface

Streaming Responses

AI responses stream in real time as tokens are generated. You see the response building incrementally rather than waiting for the full output.

Markdown Rendering

AI responses are rendered as formatted Markdown, supporting:

• Headers (H1-H6)

• Code blocks with syntax highlighting

• Tables

• Lists (ordered and unordered)

• Bold/italic text

• Links

Context Preview

Before the prompt is sent, you can see a preview of the redacted context. This shows exactly what data will leave Burp, allowing you to verify that sensitive information is properly handled.

Error Display

If a backend fails or returns an error, the chat panel displays diagnostic information including:

• Error messages from the backend.

• Exit codes for CLI backends.

• Suggestions for common fixes.

Tools Button

The Tools button opens a menu of available MCP tools. Selecting a tool inserts the corresponding command into the chat input field. Use this to:

• Force the AI to use a specific MCP tool.

• Build custom tool call sequences.

• Explore available tools without memorizing names.

Tips for Effective Use

• Be specific: "Check this request for IDOR in the user_id parameter" is better than "find bugs."

• Use context menu shortcuts: The pre-built actions have optimized prompts that produce better results than freeform questions.

• Iterate: If the first response isn't detailed enough, ask follow-up questions in the same session — the AI has the full conversation context.

• Compare backends: Try the same analysis with different backends to see which gives better results for your specific use case.

• Use passive scanner for volume: For large-scope assessments, let the passive scanner work in the background and use chat for deep-dive analysis on specific findings.