- Gradle and Java 21 project.
- Montoya bootstrap and suite tab.
- Context-menu capture.
- Immutable workflow model.
- Skip, repeat, and replay mutation generation.
- Regex and JSON Pointer variable resolution.
- Semantic JSON diff and basic invariants.
- Safety-policy evaluation.
- Loopback-only secure/vulnerable replay fixture.
- Developer-mode Burp and fixture launch scripts.
- Scripted lifecycle traffic through the Burp proxy.
- Workflow editor with CRUD, step ordering, roles, enablement, and raw-request inspection.
- Project-backed workflow persistence.
- Variable editor and editable request templates.
- Sequential request execution through Montoya.
- Per-run request limit and delay enforcement.
- State-changing confirmation dialog with exact sequence preview.
- Immutable run result and raw HTTP evidence models.
- Multiple actor identities with editable session seeds.
- Per-actor, per-origin isolated cookies and Authorization seeds.
- Actor-swap mutations.
- Redacted JSON evidence export.
- Replay-after-revoke, replay-after-delete, and one-time-use presets.
- In-session comparative result matrix.
- Automatic dependency suggestions with evidence and confidence.
- Interactive workflow graph.
- multiple identities and isolated cookie jars;
- actor swapping;
- before/after probes;
- configurable volatile JSON paths;
- cleanup workflows with post-cleanup verification;
- replay after revoke, delete, and one-time use presets;
- result matrix;
- evidence export.
- automatic dependency suggestions;
- graph representation;
- stale object and token mutation;
- expression-based invariants;
- informational Burp audit-issue publication;
- workflow import/export.
- high-concurrency race testing;
- arbitrary fuzzing;
- generic SQL injection or XSS scanning;
- autonomous exploit generation;
- cloud services or mandatory AI;
- automatic vulnerability classification based only on response differences.