Integrating your existing Burp Enterprise installation with Chariot allows you to leverage Chariot's threat analysis capabilities alongside your web application security scanning. This integration automatically imports Burp Enterprise scan results into Chariot, where our Managed Service team can analyze the findings, prioritize real threats, and provide actionable insights about their potential impact on your organization. By combining Burp Enterprise's comprehensive scanning with Chariot's expert analysis, you get a clear understanding of which web application vulnerabilities pose the greatest risk to your business.
Setting Up API Access in Burp Enterprise
Before configuring the integration in Chariot, you'll need to create a dedicated API user in Burp Enterprise:
- Log into Burp Enterprise as an administrator
- Navigate to Team > Add a new user
- Configure the new user:
- Enter a descriptive name (e.g., "Chariot Integration")
- Set a username that identifies the integration
- Provide an administrator email address
- Select API Key as the login type
- Click the save icon in the upper-right corner
- Important: When prompted, copy both the API key and URL - store these securely as they'll be needed for the Chariot configuration. Note that the API key cannot be retrieved later; if lost, you'll need to generate a new one.
Configuring the Integration in Chariot
Accessing the Integration Setup
- Open Chariot's web interface
- Navigate to the Integrations page:
- Look for it in the left navigation menu
- It's located under the Administration section
- Click "Add Integration"
- Find the Burp Enterprise integration:
- Use the search function, or
- Browse the Vulnerability Management section
Connection Setup
- Click "Connect" on the Burp Enterprise card
- In the configuration popup, enter:
- The Burp Enterprise URL you saved earlier
- The API token generated for your API user
- Save the configuration
How It Works
After setup is complete, the integration works continuously in the background to keep your vulnerability data current. Using the secure API token you've provided, Chariot connects to your Burp Enterprise instance and maintains an up-to-date view of all your security scans. For each target in your environment, Chariot automatically retrieves the latest scan results, processing multiple findings simultaneously for optimal performance. As new scan data becomes available, it flows directly into Chariot where our Managed Service team can analyze the results and identify which findings require your attention.
If you find a topic that you would like discussed in detail, or need further assistance, please let us know at support@praetorian.com!