Burp Enterprise

Integrating your Burp Enterprise installation with the Praetorian Guard Platform (PGP) imports Burp Enterprise scan results into PGP, where the Managed Service team analyzes the findings, prioritizes them, and explains their potential impact.

Setting Up API Access in Burp Enterprise

Before configuring the integration in PGP, you'll need to create a dedicated API user in Burp Enterprise:

1. Log into Burp Enterprise as an administrator
2. Navigate to Team > Add a new user
3. Configure the new user:
   • Enter a descriptive name (e.g., "PGP Integration")
   • Set a username that identifies the integration
   • Provide an administrator email address
   • Select API Key as the login type
4. Click the save icon in the upper-right corner
5. Important: When prompted, copy both the API key and URL - store these securely as they'll be needed for the PGP configuration. Note that the API key cannot be retrieved later; if lost, you'll need to generate a new one.

Configuring the Integration in PGP

Accessing the Integration Setup

1. Open PGP's web interface
2. Navigate to the Integrations page:
   • Look for it in the left navigation menu
   • It's located under the Administration section
3. Click "Add Integration"
4. Find the Burp Enterprise integration:
   • Use the search function, or
   • Browse the Vulnerability Management section

Connection Setup

1. Click "Connect" on the Burp Enterprise card
2. In the configuration popup, enter:
   • The Burp Enterprise URL you saved earlier
   • The API token generated for your API user
3. Save the configuration

How It Works

After setup, PGP uses the API token to connect to your Burp Enterprise instance and retrieve the latest scan results for each target. New scan data flows into PGP, where the Managed Service team reviews it and identifies which findings need your attention.

If you find a topic that you would like discussed in detail, or need further assistance, please let us know at support@praetorian.com!