# Functional PoCs in less than a minute? Julen Garrido Estévez puts Burp AI to the test

DevFeed: [Functional PoCs in less than a minute? Julen Garrido Estévez puts Burp AI to the test](<https://devfeed.tech/articles/functional-pocs-in-less-than-a-minute-julen-garrido-estevez-puts-burp-ai-to-the-test-7708.md>)

Original publisher: [Read original article](<https://portswigger.net/blog/functional-pocs-in-less-than-a-minute>)

Author: Hassan Ud-Deen

Published: 2026-01-16T00:00:00Z

Content type: article

Language: en

Sources: [PortSwigger Blog](<https://devfeed.tech/sources/portswigger-blog.md>)

Topics: [Artificial Intelligence](<https://devfeed.tech/topics/ai.md>), [Prompt Engineering](<https://devfeed.tech/topics/prompt-engineering.md>), [Security](<https://devfeed.tech/topics/security.md>), [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [Web](<https://devfeed.tech/topics/web.md>)

Tags: [ai](<https://devfeed.tech/tags/ai.md>), [analysis](<https://devfeed.tech/tags/analysis.md>), [cost](<https://devfeed.tech/tags/cost.md>), [generation](<https://devfeed.tech/tags/generation.md>), [hallucinations](<https://devfeed.tech/tags/hallucinations.md>), [insights](<https://devfeed.tech/tags/insights.md>), [security](<https://devfeed.tech/tags/security.md>), [time](<https://devfeed.tech/tags/time.md>), [vulnerabilities](<https://devfeed.tech/tags/vulnerabilities.md>), [web](<https://devfeed.tech/tags/web.md>)

## AI overview

A pentester evaluates Burp AI in Repeater using controlled tests across Web Security Academy labs, a deliberately vulnerable shop, and personal environments. The article compares prompting styles by cost, requests, time to proof of concept, adherence, and hallucinations, finding that clear free-form prompts provided the best overall balance and produced a valid PoC at low cost.

## Source excerpt

Note: This is a guest post by pentester Julen Garrido Estévez (@b3xal). Methodology Key results Examples Key learnings Prompt template A pentester's POV on Burp AI Pentester Julen Garrido Es