Burp Suite User Forum

Login to post

Throttle requests in Burp Enterprise

chandraveer | Last updated: Dec 04, 2018 06:08AM UTC

Is there any provision for throttling requests in scanning a site. in essence, how to control threads in case of scanning?

PortSwigger Agent | Last updated: Dec 04, 2018 11:07AM UTC

Yes, this is supported by the Resource Pool feature. When setting up a scan you can configure the resource pool to have a maximum number of concurrent requests, and an optional delay between requests. (I'm assuming you're using Burp 2. On Burp 1 the options are also present, but in a different place)

Burp User | Last updated: Dec 04, 2018 11:20AM UTC

I'm using Burp Suite Enterpries Edition. How can I control the requests in the same?

PortSwigger Agent | Last updated: Dec 04, 2018 11:29AM UTC

Hi Chandraveer, Unfortunately, resource pools are not currently configurable with Enterprise. This is on the development plan though. Please let us know if you need any further assistance.

Burp User | Last updated: Dec 07, 2018 07:28AM UTC

Hey Paul, There are a number of features those are missing in Burp ENT beta version, such as exporting a report from, the progress of scanning in percentage, thread control mechanism, advanced and essential manual tools, and many more. Can we get a list of the features those are in the development plan?

PortSwigger Agent | Last updated: Dec 07, 2018 08:02AM UTC

Hi Chandraveer, Thanks for following up. Many of the things you mention - such as manual tools - will remain the preserve of Burp Pro and will not be included in Enterprise. The idea is that Enterprise is designed for developers, while Pro is designed for security testers. There is an outline of the road map in the initial announcement: - https://portswigger.net/blog/burp-suite-enterprise-edition-beta-now-available Please let us know if you need any further assistance.

Burp User | Last updated: Dec 10, 2018 06:09AM UTC

Hi, I am waiting for the reply.

Burp User | Last updated: Jan 17, 2019 04:48PM UTC

Hi -- did anything change with the requests Throttling in Burp Enterprise meanwhile? In version 2.0.13beta I see "resource_pool" String option in the API v0.1. What are the valid inputs of that field?

PortSwigger Agent | Last updated: Jan 18, 2019 10:07AM UTC

Jacek - we've not changed throttling recently. The resource_pool can be used on Burp Pro, and set to any resource pool you've created. It's not currently possible to create a resource pool in Burp Enterprise.

Liam, PortSwigger Agent | Last updated: Feb 01, 2019 03:42PM UTC

We've added scanning progress bars and estimated time remaining to Sites tree in the latest release of Burp Enterprise (1.0.14beta).

Liam, PortSwigger Agent | Last updated: Apr 10, 2019 01:12PM UTC

The latest release of Burp Enterprise includes an HTML Scan summary report, downloadable from the Scan results page. The report lists issues grouped by host and then issue type. For each issue the issue type, path, severity and confidence are included. There is an option to include or exclude any issues that are marked as false positive. Please let us know what, if any, additional information would be useful or is needed in this report.

Ben, PortSwigger Agent | Last updated: Oct 30, 2019 02:26PM UTC

Hi, The functionality to configure resource pools and throttle requests are still in our development backlog for Burp Enterprise. We will update this thread when we have some further developments.

Burp User | Last updated: Jan 16, 2020 02:33PM UTC

Any word/update on using the resource pool with Burp Enterprise or any other way to throttle the scan with Burp Enterprise?

Richard | Last updated: Sep 11, 2020 07:54PM UTC

Hi. Just bumping this feature request thread. The default request rate ends up impacting some of our production servers. We're using Burp Pro, but would really like to level-up to Enterprise and automate scans. We just need the ability to rate limit requests in Enterprise. Please consider moving this from your backlog to roadmap soon and you'll get an order of magnitude more money from us.

Liam, PortSwigger Agent | Last updated: Sep 14, 2020 02:54PM UTC

We've passed on this request to the product team. We'll update this thread when we have more information.

You need to Log in to post a reply. Or register here, for free.