Practical overview
When it fits
Use it during web application testing when you want AI-assisted analysis integrated with Burp’s traffic and issue workflow, either as passive in-scope traffic is observed or for a selected request.
Who it is for
- Web application security testers using Burp Suite Professional.
- Burp users who want AI-assisted review of in-scope HTTP traffic or selected requests.
- Security teams choosing among Burp AI, a local Ollama setup, or supported external AI providers.
Documented uses
- Review in-scope proxy traffic for potential vulnerabilities without sending additional requests through the passive check.
- Request AI analysis of a specific Burp request.
- View findings with affected parameters, confidence scores, CWE and OWASP mappings, and remediation recommendations.
- Choose an AI provider and configure its connection from Burp settings.
Requirements & limits
The README specifies Burp Suite Professional 2025.8 or later and Java 21. It describes a Community Edition, while noting that commercial and Professional editions with advanced features are available separately. Burp AI uses Burp AI credits; Ollama is described as free and local.
- Burp Suite Professional is required; Community Edition and Burp Suite DAST are unsupported.
- Use AI must be enabled for the extension in Burp, including when using Ollama.
- Passive analysis must be started manually and is off by default.
- Burp AI requires no separate API configuration but uses Burp AI credits; external providers may need an API URL, key, and model.
- The README describes always-on credential redaction and an enabled-by-default sanitizer for additional secrets and personal information; the sanitizer can be disabled, but header redaction remains.
Check current requirements in the official documentation. Source-based guidance does not mean OpenViST has run or independently tested this project.
Set up SILENTCHAIN for Burp Suite analysis
Load the extension, configure an AI provider, and enable passive or request-specific analysis.
Before you start
- Burp Suite Professional 2025.8 or later; Burp Community Edition and Burp Suite DAST are unsupported.
- Java 21 runtime.
- An available provider: Burp AI, Ollama, OpenAI, Claude, Gemini, or Azure OpenAI / Foundry. External providers may require an API URL, key, and model.
Steps
Download the Community Edition JAR from the project’s GitHub Releases, or build from source using the included Gradle wrapper and JDK 21 toolchain.
In Burp, open Extensions → Installed → Add, choose Java, select the JAR, and enable Use AI for SILENTCHAIN.
Open SILENTCHAIN settings, select a provider, and configure its API URL, key, and model if required; the README says settings changes apply immediately.
Set the target scope in Burp, then start passive analysis in the SILENTCHAIN Community tab and browse the target through Burp’s proxy, or right-click a request and choose Analyze Request (SILENTCHAIN).
Expected outcome
Analysis findings appear in the SILENTCHAIN Community tab and in Burp’s native issue views.
Guide limitations
- Passive analysis is off by default and requires Use AI to be enabled for SILENTCHAIN.
- Burp AI uses Burp AI credits. External provider setup requirements vary.
- The extension’s passive check does not send requests to the target.
Sources & review
Source record details
- Source availability
- Active
- Sources checked
- 16 October 2026
- Original website title
- silentchainai/SILENTCHAIN · Official homepage title · retained in its source language