Softwr
Burp Suite logo

Burp Suite

The leading toolkit for web security testing

Overview

What Burp Suite does

Burp Suite is the world's most widely used web application security testing tool. It provides a complete suite of tools for security professionals to find vulnerabilities in web applications.

What people use it for

  • Manual web application penetration testing through an intercepting proxy
  • Automated scanning for web vulnerabilities on the Professional edition
  • Extending testing with community-built BApp extensions
  • Enterprise-wide dynamic scanning through Burp DAST

The honest half

Where it falls short

Concrete and checkable, so you can decide whether any of them matter to you. This is the half of a review a vendor will not write about Burp Suite.

  • The automated vulnerability scanner is Professional only, at $499; the free Community edition is manual tools
  • BApp Store extensions require the Professional edition
  • DAST and the agentic testing product are separate enterprise offerings with no published price
  • Professional is licensed per user per year rather than perpetually

Pricing

What Burp Suite costs

Taken from the vendor's own pricing page. Prices move, so check before you buy.

Community Edition

Free

  • Essential manual tools
  • Proxy
  • Repeater
  • Decoder
  • Comparer

Professional

$449 /yr

  • All Community features
  • Burp Scanner
  • Advanced manual tools
  • Extensions
  • Project files

Enterprise

$6,995 /yr

  • CI/CD integration
  • Scheduled scans
  • Role-based access
  • JIRA integration
  • Multiple agents

Capabilities

Features

  • Web vulnerability scanner

    Web vulnerability scanner capability

  • Proxy interceptor

    Proxy interceptor capability

  • Intruder

    Intruder capability

  • Repeater

    Repeater capability

  • Sequencer

    Sequencer capability

  • Decoder

    Decoder capability

  • Comparer

    Comparer capability

  • Logger

    Logger capability

  • Extensible via APIs

    Extensible via APIs capability

  • JIRA

    Integration with JIRA

  • GitHub

    Integration with GitHub

  • GitLab

    Integration with GitLab

Behind it

Who makes Burp Suite

Company
PortSwigger Ltd
Based in
Knutsford, United Kingdom

Keep looking

Where to go from Burp Suite

Other Security Cybersecurity software

Softwr does not host reviews and shows no star rating for Burp Suite, because a rating we did not collect is not ours to publish. What is here is the pricing and platform detail from the vendor’s own pages, limitations we could state concretely, and alternatives a reviewer confirmed people weigh against it. Tell us if any of it is wrong.

More on Burp Suite

Best Security & Cybersecurity software alternatives

Open, source-available software licensing API

Simple to setup, secure cloud backup, multi device support

Trusted access for all users, all devices

Digital privacy and freedom is as easy as flicking on a light switch

Web application security testing made easy

All-in-one protection for your digital life

Compare Burp Suite with alternatives