Before installing Burp Bounty Pro, ensure you have the following:
✅ Burp Suite Professional installed on your system (Community Edition has limited scanning capabilities)
✅ Java Runtime Environment (JRE) version 14 or above
Obtain the latest version of Burp Bounty Pro from the official website at bountysecurity.ai or from your purchase confirmation email.
Open Burp Suite Professional.
Navigate to the Extensions tab (formerly called "Extender")
Click on the Installed sub-tab
Click the Add button
In the dialog that appears:
Select Java as the extension type
Click Select file... and choose the BurpBountyPro.jar file you downloaded
Click Next to proceed with the installation
Ensure that:
✅ The extension is listed in the Installed extensions list with the checkbox ticked
✅ No errors appear in the extension output panel
✅ The Burp Bounty Pro tab appears in the main Burp Suite tab bar
Access the newly added Burp Bounty Pro tab in the Burp Suite interface. You're ready to begin configuring your profiles and start your security testing! 🎉
When Burp Bounty Pro loads for the first time, it will:
📦 Auto-load default profiles — 254 pre-configured scanning profiles are loaded from the bundled BurpBountyData directory
📋 Auto-load default rules — 27 Smart Scan rules are loaded for automated vulnerability detection
🔀 Initialize default variables — Global variables like {REDIRECT_DOMAIN} are set to their default values
A new Burp Bounty Pro tab will appear in the main Burp Suite interface with sub-tabs for Dashboard, Scanner, Profiles, Rules, Options, Variables, License, and About.
Navigate to the Burp Bounty Pro tab
Click the License sub-tab
Enter your license key
Click Activate
After installation, verify that:
✅ The Burp Bounty Pro tab appears in the main Burp Suite window
✅ The Dashboard sub-tab shows the scan control buttons (Pause All, Resume All, Stop, Clear Issues)
✅ The Profiles sub-tab lists loaded profiles across all three tables:
🎯 Active Profiles — with columns: Enabled, Profile Name, Tags, Author's Twitter
📨 Passive Request Profiles — with columns: Enabled, Profile Name, Tags, Author's Twitter
📩 Passive Response Profiles — with columns: Enabled, Profile Name, Tags, Author's Twitter
✅ The Rules sub-tab shows the 27 default rules
After installing Burp Bounty Pro, you may want to:
📦 Review Default Profiles — Familiarize yourself with the 254 default profiles provided and adjust them to fit your testing needs. Use the tag dropdown to browse by category (XSS, SQLi, CVEs, etc.)
🚀 Explore the Quick Start — Follow the Quick Start guide to run your first scan in under 5 minutes
🔀 Configure Variables — Set your {REDIRECT_DOMAIN} and {ATTACKER_DOMAIN} in the Variables tab
🔄 Check for Updates — Check for updates regularly to ensure you have the latest features and fixes
Burp Bounty Pro has a built-in update checker that detects new versions of both the extension and the profiles.
Go to the Burp Bounty Pro tab > About sub-tab
Click the Check For Updates button
The extension will check for:
🆕 New versions of Burp Bounty Pro — If a new version is available, you'll be notified and can download it
📦 New versions of the profiles — Updated and new scanning profiles are downloaded and installed automatically
💡 Tip: Check for updates regularly to get the latest vulnerability detection profiles and bug fixes.
📝 Note: Your existing profiles, rules, and settings are preserved across updates.
📖 Documentation
🎥 Video Tutorials
🌐 Main Website
📧 Support
If you encounter any issues during the installation or have questions about using Burp Bounty Pro, please:
📖 Check the FAQ for common solutions
📧 Contact our support team at hello@bountysecurity.ai
Last updated