Skip to main content
Varaxon Technologies

PortSwigger Burp Suite · XML issue report

Burp Suite reports your clients can act on

Burp Suite finds web application issues; your client needs to know which ones matter and what to do. Upload Burp's XML issue report to Varaxon Scan Hub and get a ranked, plain-language report tied to the evidence.

Check your export freeSee sample reports

What Scan Hub reads from Burp Suite

  • Burp's XML issue report.

    Scan Hub reads the XML file Burp writes when you report issues, including the document type declaration Burp puts at the top.

  • Issue, severity and location.

    Each issue's name, severity, host and path are read into the report, so it shows where in the application the problem was found.

  • Plain language, evidence kept.

    The report explains each issue for the client in plain language and keeps Burp's evidence beside it for your technicians.

How to export from Burp Suite

  1. In Burp Suite, select the issues to include (for example in Target, Site map, Issues), right-click and choose Report selected issues.
  2. Choose XML as the format and save the file.
  3. Run the free pre-flight check to see what Scan Hub reads from it.
  4. Upload it to the client in Scan Hub and build the report.

What the report states explicitly

  • The report covers what is in the export. Pages and hosts Burp never tested are not reported as clean.
  • Where an issue carries no CVE, which is normal for web findings, it is ranked on its stated severity, not treated as low risk.
  • Every statement in the report traces back to an issue in the Burp file.

Common questions

Which Burp file does Scan Hub need?
The XML file from Report selected issues. HTML reports are made for people to read and are not used.
Do I need Burp Suite Professional?
Scan Hub only needs the XML issue report. Burp's issue reporting is part of Burp Suite Professional.
Can web and network findings go in one report?
Yes. Upload the Burp export and a network scanner export to the same client. Each report states which scanner and file it came from.

Guide

Explain findings to non-technical clientsHow to turn scanner language into something a business owner acts on.Read the guide

Cookie preferences

Essential site functions remain available whichever option you choose. Your advertising choice is saved on this site. The Scan Hub has a separate choice.

Google and Reddit may receive cookies, identifiers, browser and device information, and your network/IP information. Reject or withdraw at any time. Read the Privacy Policy.