BugCopilot

Upload a Burp XML export → get an API map + decision-first triage + submission-ready narratives.

Large files are uploaded directly to the backend with a short-lived upload token (no API key in the browser).

Build: premium-clean

Upload & Analyze

Set a scope to reduce noise. Evidence is scrubbed by default.

Burp XML file

No file selected.

Browse…

I confirm I have authorization to test/analyze this traffic.

Use only for your own app, test environment, or approved bug bounty scope.

Target scope host (recommended)

Tip: set this to your target domain to reduce noise from analytics / 3rd‑party calls.

Exclude third‑party domains (Google, Sentry, Stripe, etc.)

Keeps focus on endpoints you likely own.

Triage + narratives (drafts). Evidence scrubbed by default.

API map: 0Triage: 0Drafts: 0

Display

Show evidence

No results yet. Upload a Burp XML and run analysis.