Burp Suite Professional
by PortSwigger
Web security testing toolkit for penetration testers, with a proxy, scanner, Intruder and an extension store.
About
Web security testing toolkit for penetration testers, with a proxy, scanner, Intruder and an extension store.
Burp Suite Professional is PortSwigger's toolkit for manual and automated web application security testing. It is used by penetration testers to map the attack surface of modern web apps, gather intelligence and identify weaknesses before attackers do.
The product combines a proxy with intercept view, a vulnerability scanner with authenticated API scanning, Burp Intruder for attacks, and automatic logging that feeds reports. It can be extended through the BApp Store, Bambdas and BChecks, and includes Burp AI to speed up validation and repetitive tasks. A free trial is offered and the Professional edition is listed at $499.
Key features
Product details
Vendor
PortSwigger
Category
Application & API Security
Pricing model
subscription
Starting price
Professional $499
Free trial
Yes
Pricing
Pricing model: subscription
Plans
- Burp Suite Professional: $499
Similar software
42Crunch
by 42Crunch
API security platform that applies contract driven security assessment, vulnerability testing and runtime protection to APIs and to the MCP servers used by AI agents.
Aikido Security
by Aikido Security
Developer-focused AppSec suite covering code, cloud and runtime with SAST, SCA, DAST and secrets detection.
Akamai API Security
by Akamai Technologies
API security product from Akamai that gives visibility into an organization's full API estate with continuous detection and analysis, from development through production.
Barracuda WAF-as-a-Service
by Barracuda Networks
Cloud-delivered WAF with API protection, bot defense and unmetered L3-L7 DDoS protection.
Black Duck Polaris
by Black Duck
Cloud-native AppSec platform unifying SAST, SCA, DAST, IaC analysis and secrets detection.
Cequence API Security
by Cequence Security
AI-first API security that discovers, monitors and tests APIs and blocks API attacks.