Core Features
VISTA provides five integrated tools for AI-powered security testing.
Feature Overview
| Feature | Tab | Description |
|---|---|---|
| Traffic Monitor | 🌐 Traffic Monitor | Passive AI traffic analysis with automatic vulnerability detection |
| AI Advisor | 💡 AI Advisor | Interactive testing assistant with conversation history |
| Payload Library | 🎯 Payload Library | 80+ payloads across 8 categories with AI suggestions |
| WAF Detection | Built-in | Automatic WAF identification with 250+ bypass techniques |
| Prompt Templates | 📝 Templates | 12 expert templates + custom template creation |
How They Work Together
┌─────────────────────────┐
│ Burp Suite Proxy │
└────────────┬────────────┘
│ HTTP Traffic
┌────────────▼────────────┐
│ VISTA Core Engine │
│ ┌──────────────────┐ │
│ │ WAF Detection │ │
│ │ Scope Filtering │ │
│ └──────────────────┘ │
└──┬─────────────────┬────┘
│ │
┌────────────▼──┐ ┌────────▼──────────┐
│Traffic Monitor│ │ AI Advisor │
│ (Passive) │ │ (Interactive) │
│ │ │ │
│ Auto-analyze │ │ Send request → │
│ all traffic │ │ Get AI guidance → │
│ Flag vulns │ │ Follow-up chat │
└───────┬───────┘ └────────┬───────────┘
│ │
┌───────▼─────────────────────▼───────┐
│ AI Provider (API) │
│ OpenAI / Azure / OpenRouter │
└───────┬─────────────────────┬───────┘
│ │
┌───────▼───────┐ ┌───────▼───────┐
│ Findings │ │ Suggestions │
│ Tree View │ │ + Payloads │
└───────────────┘ └───────────────┘
The Traffic Monitor runs passively in the background, while the AI Advisor provides on-demand interactive analysis. Both use the same AI provider, WAF detection, and scope management systems.