| CARVIEW |
Select Language
HTTP/2 301
content-length: 0
access-control-allow-origin: null
cache-control: no-store, no-cache, s-maxage=0, private
content-security-policy: default-src 'none';form-action 'self';base-uri 'none';child-src 'self' https://www.youtube.com/embed/ https://cheat-sheets.portswigger.net https://*.portswigger.com;connect-src 'self' https://ps.containers.piwik.pro https://ps.piwik.pro https://go.portswigger.net https://tags.srv.stackadapt.com https://www.google.com/recaptcha/ https://formsubmission.portswigger.net https://*.portswigger.com;font-src 'self' https://fonts.gstatic.com data:;frame-src 'self' https://*.portswigger.com/ https://portswigger.net/ https://cheat-sheets.portswigger.net https://www.youtube.com/embed/ https://www.google.com/recaptcha/;img-src 'self' https://*.portswigger.com/ https://portswigger.net/ https://i.ytimg.com/ https://tags.srv.stackadapt.com/sa.jpeg;script-src https://*.portswigger.com/ https://portswigger.net/ https://ps.containers.piwik.pro/ppms.js https://ps.piwik.pro/ppms.js https://www.youtube.com/iframe_api https://www.youtube.com/s/player/ https://tags.srv.stackadapt.com/events.js https://go.portswigger.net/pd.js 'nonce-S++U4BvScTonBLoTUKPxuIpZADlgRAUI' 'strict-dynamic';style-src 'self' https://tags.srv.stackadapt.com/sa.css 'nonce-S++U4BvScTonBLoTUKPxuIpZADlgRAUI' https://fonts.googleapis.com/css2* https://unpkg.com/animate.css@4.1.1/animate.css https://unpkg.com/@teleporthq/teleport-custom-scripts/dist/style.css;
date: Fri, 10 Oct 2025 18:13:16 GMT
location: /burp/documentation/dast/setup
server: '; DELETE carlos FROM users --
strict-transport-security: max-age=31536000; preload
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-hiring-now: We're on a mission to secure the web: https://portswigger.net/careers
x-robots-tag: all
x-xss-protection: 1; mode=block
x-cache: Miss from cloudfront
via: 1.1 ce56f9cb3598ee420df155ae7a73ed18.cloudfront.net (CloudFront)
x-amz-cf-pop: TLV55-P1
x-amz-cf-id: tE2BjmUdr1JKt6FQA_7wUfB-OusiVwArCD9gdQGCSyrud6aCIr4DBw==
HTTP/2 200
content-type: text/html; charset=utf-8
access-control-allow-origin: null
cache-control: public, must-revalidate, max-age=60
x-xss-protection: 1; mode=block
content-security-policy: default-src 'none';form-action 'self';base-uri 'none';child-src 'self' https://www.youtube.com/embed/ https://cheat-sheets.portswigger.net https://*.portswigger.com;connect-src 'self' https://ps.containers.piwik.pro https://ps.piwik.pro https://go.portswigger.net https://tags.srv.stackadapt.com https://www.google.com/recaptcha/ https://formsubmission.portswigger.net https://*.portswigger.com;font-src 'self' https://fonts.gstatic.com data:;frame-src 'self' https://*.portswigger.com/ https://portswigger.net/ https://cheat-sheets.portswigger.net https://www.youtube.com/embed/ https://www.google.com/recaptcha/;img-src 'self' https://*.portswigger.com/ https://portswigger.net/ https://i.ytimg.com/ https://tags.srv.stackadapt.com/sa.jpeg;script-src https://*.portswigger.com/ https://portswigger.net/ https://ps.containers.piwik.pro/ppms.js https://ps.piwik.pro/ppms.js https://www.youtube.com/iframe_api https://www.youtube.com/s/player/ https://tags.srv.stackadapt.com/events.js https://go.portswigger.net/pd.js 'nonce-3BA9BdMc3+4zIgc2Ny3jg4XWrw3Tmnc8' 'strict-dynamic';style-src 'self' https://tags.srv.stackadapt.com/sa.css 'nonce-3BA9BdMc3+4zIgc2Ny3jg4XWrw3Tmnc8' https://fonts.googleapis.com/css2* https://unpkg.com/animate.css@4.1.1/animate.css https://unpkg.com/@teleporthq/teleport-custom-scripts/dist/style.css;
date: Fri, 10 Oct 2025 18:13:16 GMT
server: '; DELETE carlos FROM users --
strict-transport-security: max-age=31536000; preload
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-hiring-now: We're on a mission to secure the web: https://portswigger.net/careers
x-robots-tag: all
content-encoding: gzip
vary: accept-encoding
x-cache: Miss from cloudfront
via: 1.1 ce56f9cb3598ee420df155ae7a73ed18.cloudfront.net (CloudFront)
x-amz-cf-pop: TLV55-P1
x-amz-cf-id: uH-ZNnjIaGe51rOWmlq5CCf8kZeIlNJkdKeB3DTCbZ_ic5D1u8kOoQ==
Setting up Burp Suite DAST - PortSwigger
Research
Academy
My account
Customers
About
Blog
Careers
Legal
Contact
Resellers
Attack surface visibility
Improve security posture, prioritize manual testing, free up time.
CI-driven scanning
More proactive security - find and fix vulnerabilities earlier.
Application security testing
See how our software enables the world to secure the web.
DevSecOps
Catch critical bugs; ship more secure software, more quickly.
Penetration testing
Accelerate penetration testing - find more bugs, more quickly.
Automated scanning
Scale dynamic scanning. Reduce risk. Save time/money.
Bug bounty hunting
Level up your hacking and earn more bug bounties.
Compliance
Enhance security monitoring to comply with confidence.
View all solutions
Support Center
Get help and advice from our experts on all things Burp.
Documentation
Tutorials and guides for Burp Suite.
Get Started - Professional
Get started with Burp Suite Professional.
Get Started - Enterprise
Get started with Burp Suite Enterprise Edition.
User Forum
Get your questions answered in the User Forum.
Downloads
Download the latest version of Burp Suite.
Visit the Support Center
DAST
Setting up Burp Suite DAST
-
Last updated: October 1, 2025
-
Read time: 1 Minute
Depending on your subscription, you have several different options for hosting your Burp Suite DAST instance.
- If you haven't purchased a subscription yet, see Burp Suite DAST: Pricing.
- If you want to set up a Cloud instance of Burp Suite DAST, see Setting up a Cloud instance.
- If you want to migrate from your Linux self-hosted instance, see Migrating from Linux to Cloud
- If you want to migrate from your Windows self-hosted instance, see Migrating from Windows to Cloud
- If you want to deploy a self-hosted instance of Burp Suite DAST, see Setting up a self-hosted instance.
- If you've already set up Burp Suite DAST and you want to learn more about how to use it, see the User guide.