Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Mapping scans to "false positive policies"?

Zac | Last updated: Nov 12, 2021 05:37PM UTC

I am trialing the Enterprise Edition and am using the GraphQL API to run scans on demand. We have some sites where certain vulnerabilities (say, Issues A, B and C) are considered false positives, and other sites where other vulnerabilities (say, Issues D, E and F) are considered false positives. So on Site #1, Issue B could be a false positive, but on Site #2, Issue B is a valid concern and we want it detected and reported on. When running a scan through the GraphQL API, how do I specify in the request which Issues are false positives and can be ignored, since they will be different on a site by site basis?

Alex, PortSwigger Agent | Last updated: Nov 15, 2021 09:44AM UTC