> For the complete documentation index, see [llms.txt](https://docs.burpgpt.app/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.burpgpt.app/getting-started/quick-start.md).

# Quick start

Set up BurpGPT Pro and complete your first targeted analysis.

Connect a model provider and run your first targeted analysis. You can add active scan checks or use AI Chat once this setup works.

## Before you start

Make sure you have:

* Burp Suite Professional 2026.7 or later.
* The BurpGPT Pro JAR file.
* Your licence key.
* Either a cloud provider API key or a local/self-hosted provider endpoint.
* A captured HTTP request and response to analyse in Burp.

## 1. Load the extension

1. Open Burp Suite Professional.
2. Go to `Extensions` → `Installed`.
3. Click `Add`.
4. Select `Java` as the extension type, choose the JAR file, and click `Next`.
5. Confirm that the `BurpGPT Pro` menu appears.

For the full installation guide, see [Installation](/getting-started/installation.md).

## 2. Activate your licence

Open `BurpGPT Pro` → `Licence`, then activate your licence with the key from your purchase email.

{% hint style="warning" %}
Each successful `Activate` uses an activation, even on the same computer. Used activations cannot be recovered. If your licence is already saved, use `Refresh` instead. See [Activate your licence](/getting-started/activate-your-licence.md).
{% endhint %}

## 3. Configure a model provider

Open the `BurpGPT Pro` tab and select `Provider settings`, then choose a setup guide:

* For hosted APIs, see [Configure a hosted provider](/model-setup/use-supported-cloud-based-model-providers.md).
* For Ollama or self-hosted endpoints, see [Local models and compatible endpoints](/model-setup/use-supported-local-model-providers.md).

Enter the provider, base URL, API key if required, model name, timeout, and request parameters. Model names in the dropdown are examples, not a list fetched from your provider. Press Enter after typing a custom model identifier.

## 4. Test the provider

Click `Test request` and confirm that it succeeds before analysing traffic.

If the test fails, check Burp's `Logger` tab for the provider request and response. See [Test your provider](/model-setup/test-and-validate-model-provider-settings.md) for details.

## 5. Analyse a request

1. Open `AI scanner` and review the role and prompt. Start with the `user` role and a prompt containing `{REQUEST}` and `{RESPONSE}`.
2. Select a captured request in `Proxy` → `HTTP history`.
3. Right-click and select `Extensions` → `BurpGPT Pro` → `Scan with AI (results in Target → Site map)`.

You do not need to enable `Scan: On` for targeted analysis. You can also select multiple requests; each is analysed separately.

## 6. Review the output

Open `Target` → `Site map` and select the analysed request. A successful analysis creates an issue named **GPT-generated insights**, with **Information** severity and **Tentative** confidence. Open it to review the analysis alongside the HTTP exchange.

Always manually validate AI-generated results before relying on them in a security report.

## Next steps

* [Analyse HTTP traffic](/analysis-and-prompts/analyse-http-traffic.md) in batches or during active scans.
* [Use AI Chat](/analysis-and-prompts/use-ai-chat.md) to investigate with follow-up questions.
* [Use the prompt library](/analysis-and-prompts/use-the-prompt-library.md) to save and reuse your instructions.

If no issue appears, follow [Scans do not produce results](/help-and-faq/troubleshooting.md#scans-do-not-produce-results).