Settings
Configure data files, variables, live scanning and server connections.
The current interface uses Settings, with General, Variables and Burp Bounty Servers sub-tabs. Older screenshots may call this area Options.
General
Select the base BurpBountyData directory and click Reload after managing files externally. Pro expects profiles and rules in their respective subdirectories.
Live scanner configuration is separate from the manual launch dialog:
Passive
Enable toggle, scope-only filter, excluded extensions/methods, Threads, Passive Concurrency.
Smart
The same selection filters, Threads, Passive Concurrency, Active Concurrency and RPS.
AI
Selection filters, Threads, AI Analysis Concurrency, Active Concurrency and RPS.
Initial live worker and concurrency values are generally 10, except AI Analysis Concurrency, which is 5. Excluded methods initially include OPTIONS; excluded extension lists differ by workflow. Review the displayed values rather than assuming all traffic will be analyzed.
Manual Active scans use the two settings in their launch dialog. The legacy general Scanner Settings panel is hidden in this build; older instructions to change global Active Scan Threads, Delay between requests or a visible global Max Scans control no longer describe the current UI.
Variables
Use Settings → Variables to configure custom values used by profiles. Built-in dynamic tokens are listed for reference. The default {ATTACKER_DOMAIN} is a placeholder, not a working callback endpoint. Variable reference.
Burp Bounty Servers
Add/edit server names, complete URLs, license keys and enabled state. Check health before scanning. Server setup.
Other configuration locations
Manual scan budgets, URL filters and request match/replace
The scan launch dialog.
Payloads, matching, redirects, insertion points and issue details
Each profile editor.
Rules and their actions
Rules tab and rule editor.
AI provider, model, endpoint, prompts and auto-scan
Scanners → AI → Settings.
Activation and expiration
License tab.
Startup update check
About tab.
Settings and custom profiles are different data. Back up the data directory before editing or replacing a pack, and review saved paths after moving it.
Last updated