> For the complete documentation index, see [llms.txt](https://docs.bountysecurity.ai/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.bountysecurity.ai/burp-bounty-pro/settings.md).

# Settings

Configure data files, variables, live scanning and server connections.

The current interface uses **Settings**, with **General**, **Variables**, **Burp Bounty Servers** and **Storage** sub-tabs. Older screenshots may call this area Options.

## General

Select the base `BurpBountyData` directory and click **Reload** after managing files externally. Pro expects profiles and rules in their respective subdirectories.

Live scanner configuration is separate from the manual launch dialog:

| Live workflow | Settings                                                                                     |
| ------------- | -------------------------------------------------------------------------------------------- |
| Passive       | Enable toggle, scope-only filter, excluded extensions/methods, Threads, Passive Concurrency. |
| Smart         | The same selection filters, Threads, Passive Concurrency, Active Concurrency and RPS.        |
| AI            | Selection filters, Threads, AI Analysis Concurrency, Active Concurrency and RPS.             |

Initial live worker and concurrency values are generally 10, except AI Analysis Concurrency, which is 5. Excluded methods initially include `OPTIONS`; excluded extension lists differ by workflow. Review the displayed values rather than assuming all traffic will be analyzed.

Manual Active scans use the two settings in their launch dialog. The legacy general Scanner Settings panel is hidden in this build; older instructions to change global Active Scan Threads, Delay between requests or a visible global Max Scans control no longer describe the current UI.

General and live scanner controls save automatically while you edit them. Empty exclusion lists and scope-only choices are retained across reloads. Toggling a live scanner does not reset its scope-only selection.

## Variables

Use **Settings → Variables** to configure custom values used by profiles. Built-in dynamic tokens are listed for reference. The default `{ATTACKER_DOMAIN}` is a placeholder, not a working callback endpoint. [Variable reference](/creating-profiles/global-variables.md).

Custom variable edits are saved when the cell edit is committed. Removed default values stay removed after an update.

## Burp Bounty Servers

Add/edit server names, complete URLs, license keys and enabled state. Check health before scanning. [Server setup](/burp-bounty-pro/remote-scanning.md).

## Storage

View or change the per-user configuration directory. Saved settings are independent of the JAR name and location. See [persistent storage, migration and permissions](/burp-bounty-pro/installation.md#persistent-user-storage). Reload the extension after selecting another storage directory.

## Other configuration locations

| Configuration                                                     | Location                   |
| ----------------------------------------------------------------- | -------------------------- |
| Manual scan budgets, URL filters and request match/replace        | The scan launch dialog.    |
| Payloads, matching, redirects, insertion points and issue details | Each profile editor.       |
| Rules and their actions                                           | Rules tab and rule editor. |
| AI provider, model, endpoint, prompts and auto-scan               | Scanners → AI → Settings.  |
| Activation and expiration                                         | License tab.               |
| Startup update check                                              | About tab.                 |

Settings and custom profiles are different data. Back up the data directory before editing or replacing a pack, and review saved paths after moving it.