# Burp Bounty Pro

## Burp Bounty Pro

- [Introduction](https://docs.bountysecurity.ai/readme.md): Practical guides for scanning, automation and reusable security checks.
- [Release and migration notes](https://docs.bountysecurity.ai/changelog.md): Catch up on renamed products, current workflows and compatibility notes.
- [Overview](https://docs.bountysecurity.ai/burp-bounty-pro/overview.md): Capture traffic, run focused scans and investigate findings inside Burp Suite.
- [Installation and licensing](https://docs.bountysecurity.ai/burp-bounty-pro/installation.md): Load the extension, activate your license and connect the data pack.
- [Quick start](https://docs.bountysecurity.ai/burp-bounty-pro/quick-start.md): Go from a captured request to a finding you can inspect.
- [Interface and context menus](https://docs.bountysecurity.ai/burp-bounty-pro/interface-overview.md): Find the right tab, context menu and result view for each task.
- [Active scanning](https://docs.bountysecurity.ai/burp-bounty-pro/active-scan.md): Choose profiles, send probes and review the evidence behind each finding.
- [Passive scanning](https://docs.bountysecurity.ai/burp-bounty-pro/passive-scan.md): Find useful signals in requests and responses you have already captured.
- [Smart Scan](https://docs.bountysecurity.ai/burp-bounty-pro/smart-scan.md): Use passive detections and rules to decide which active checks to run.
- [AI Scanner](https://docs.bountysecurity.ai/burp-bounty-pro/ai-scan.md): Configure model-assisted analysis and control when it launches active work.
- [Scan control and performance](https://docs.bountysecurity.ai/burp-bounty-pro/scan-control.md): Set sensible budgets, follow progress and understand scan states.
- [Connect Burp Bounty Servers](https://docs.bountysecurity.ai/burp-bounty-pro/remote-scanning.md): Keep Burp as your workspace and move scan execution to your servers.
- [Settings](https://docs.bountysecurity.ai/burp-bounty-pro/settings.md): Configure data files, variables, live scanning and server connections.
- [Troubleshooting](https://docs.bountysecurity.ai/burp-bounty-pro/faq.md): Find the next useful check when something in Pro does not behave as expected.
- [Overview](https://docs.bountysecurity.ai/burp-bounty-server/overview.md): Run profile-based scans on your own machines, with REST and optional MCP.
- [Installation and first start](https://docs.bountysecurity.ai/burp-bounty-server/installation.md): Choose your executable, start the listener and verify authenticated access.
- [Configuration reference](https://docs.bountysecurity.ai/burp-bounty-server/configuration.md): Look up CLI flags, environment variables, limits and logging defaults.
- [Profile catalogue](https://docs.bountysecurity.ai/burp-bounty-server/profile-catalogue.md): Install saved profiles and confirm what the running server can discover.
- [REST API](https://docs.bountysecurity.ai/burp-bounty-server/rest-api.md): Submit exchanges, control scans and retrieve results through HTTP.
- [Connect an MCP client](https://docs.bountysecurity.ai/burp-bounty-server/mcp-setup.md): Connect an agent to the correct endpoint, transport and license header.
- [MCP tools reference](https://docs.bountysecurity.ai/burp-bounty-server/mcp-tools.md): A practical reference for discovery, scan control and finding retrieval.
- [MCP workflows](https://docs.bountysecurity.ai/burp-bounty-server/mcp-workflows.md): Follow complete examples for active scanning, passive analysis and results.
- [Single insertion point selection](https://docs.bountysecurity.ai/burp-bounty-server/insertion-selection.md): Use $BBOUNTY$ to focus a Server scan on one selected request span.
- [Approvals and destination scope](https://docs.bountysecurity.ai/burp-bounty-server/approvals-and-scope.md): Understand automatic approval, pending requests and destination boundaries.
- [Multiple servers](https://docs.bountysecurity.ai/burp-bounty-server/distributed-scanning.md): Divide work between servers while keeping ownership and budgets clear.
- [Results and retention](https://docs.bountysecurity.ai/burp-bounty-server/results-and-retention.md): Keep the findings you need and understand how long evidence remains available.
- [Deployment and operation](https://docs.bountysecurity.ai/burp-bounty-server/operations.md): Deploy behind TLS or a tunnel, manage logs and shut down cleanly.
- [Troubleshooting](https://docs.bountysecurity.ai/burp-bounty-server/troubleshooting.md): Resolve common startup, authentication, catalogue and history problems.
- [Create profiles in the graphical editor](https://docs.bountysecurity.ai/creating-profiles/overview.md): Build a check in the graphical editor. Save it once, then reuse the generated profile.
- [Create an active profile](https://docs.bountysecurity.ai/creating-profiles/creating-active-profile.md): Build a marker-reflection check using the controls in the Pro editor.
- [Create passive profiles](https://docs.bountysecurity.ai/creating-profiles/creating-passive-profile.md): Create request and response detectors from captured traffic.
- [Multi-step profiles](https://docs.bountysecurity.ai/creating-profiles/multi-step-profiles.md): Add a confirmation step and decide which result should produce an issue.
- [Payloads and positioning](https://docs.bountysecurity.ai/creating-profiles/payloads.md): Add probe values, choose where they go and preserve useful controls.
- [Insertion points](https://docs.bountysecurity.ai/creating-profiles/insertion-points.md): Select the request locations your active profile is allowed to mutate.
- [Match types](https://docs.bountysecurity.ai/creating-profiles/match-types.md): Choose the signal that distinguishes a meaningful result from a normal response.
- [Grep conditions, scope and filters](https://docs.bountysecurity.ai/creating-profiles/grep-options.md): Build readable matching conditions with table rows, operators and scope.
- [Redirections](https://docs.bountysecurity.ai/creating-profiles/redirections.md): Choose which response to inspect and how far the scanner may follow redirects.
- [Raw HTTP requests](https://docs.bountysecurity.ai/creating-profiles/raw-request.md): Use the request editor for a fixed endpoint or a specific HTTP structure.
- [Match and replace](https://docs.bountysecurity.ai/creating-profiles/match-and-replace.md): Transform request or payload text through the profile editor.
- [Payload encoding](https://docs.bountysecurity.ai/creating-profiles/payload-encoding.md): Build an encoding chain and inspect the bytes the application receives.
- [Variables](https://docs.bountysecurity.ai/creating-profiles/global-variables.md): Keep profiles reusable with context values, custom tokens and interaction IDs.
- [Issue properties](https://docs.bountysecurity.ai/creating-profiles/issue-properties.md): Write findings that explain the observation, evidence and practical impact.
- [Tags](https://docs.bountysecurity.ai/creating-profiles/tags.md): Organize profiles for discovery, menu selection and rule actions.
- [Exported file reference (technical)](https://docs.bountysecurity.ai/creating-profiles/field-reference.md): Technical lookup for the files generated by the graphical profile editor.
- [Pro and Server compatibility](https://docs.bountysecurity.ai/creating-profiles/compatibility.md): Check the differences before moving a profile between Pro and Server.
- [Validate and distribute saved profiles](https://docs.bountysecurity.ai/creating-profiles/validation.md): Reopen, test and distribute the profile generated by Pro.
- [Default profile inventory](https://docs.bountysecurity.ai/creating-profiles/default-profiles.md): Browse the reviewed pack by profile type, enabled state, tags and severity.
- [Examples and agent skills](https://docs.bountysecurity.ai/creating-profiles/examples.md): Open working examples in Pro and download companion tools for agents.
- [Overview](https://docs.bountysecurity.ai/burp-bounty-pro-rules/overview.md): Turn passive observations into focused active checks with Smart Scan.
- [Create and validate a rule](https://docs.bountysecurity.ai/burp-bounty-pro-rules/creating-rules.md): Connect one passive trigger to one active action in the Rules editor.
- [Format and current limitations](https://docs.bountysecurity.ai/burp-bounty-pro-rules/reference.md): Understand saved rule rows, dependencies and current execution limits.
- [Examples](https://docs.bountysecurity.ai/burp-bounty-pro-rules/examples.md): Start with small automation patterns and verify the requests they launch.
- [Default rule inventory](https://docs.bountysecurity.ai/burp-bounty-pro-rules/default-rules.md): Inspect the reviewed Smart Scan rules and their profile dependencies.