Burp Suite

Web application security testing platform with an intercepting proxy, scanner, and manual testing tools.

Pricing: free, subscription
Free tier: true
License: proprietary
Open source: No

Editorial review

Burp Suite has not yet been editorially reviewed. User reviews and published field data below are unaffected — we say so rather than implying an editorial verdict.

Facts & attributes

Every value carries its evidence state. “—” means unknown — never a silent default (P-02).

Identity · Taxonomy

Documentation(HTTPS URL): https://portswigger.net/burp/documentationVerified
Tags(open-source;cloud-native): penetration-testing, dast, web-security, vulnerability-scanningVerification pending

Platform · Deployment

Delivery model(SaaS;self-hosted;desktop;mobile;embedded;managed-cloud;appliance): desktopVerification pending
Desktop apps(Windows;macOS;Linux): Burp Suite Professional, Burp Suite Community EditionVerified

Pricing · Licensing

Free plan(true/false): trueVerification pending
Free trial(true/false): trueVerification pending
License model(proprietary;open-source;source-available;dual-license): proprietaryVerification pending
Pricing model(free;subscription;usage;seat;asset;transaction;revenue-share;perpetual;custom): free, subscriptionVerification pending

Features · Product · Fit

Core capabilities(authoring;automation;analytics): Intercepting proxy for web traffic analysis, Automated web vulnerability scanning (Burp Scanner), Manual and automated testing tools (Intruder, Repeater), Burp AI assistance for pentest workflows, Extensibility via BApp store, Bambdas and BChecks, Automated reporting for findingsVerification pending

Api · Integrations · Ecosystem

API available(true/false): trueVerification pending

Support · Docs · Services

Support channels(email;ticket;chat;phone;community): support portal, community forumVerification pending

Audience · Use · Case

Best for(Neutral editorial summary): Pentesters and AppSec teams testing web applications manually and with scanner-assisted DASTVerification pending
Company-size fit(individual;SMB;mid-market;enterprise): individual, SMB, mid-market, enterpriseVerification pending
Primary use cases(build;monitor;automate): Web application penetration testing, Dynamic application security testing (DAST), Bug bounty hunting, Compliance-driven security monitoringVerification pending
Skill level(beginner;intermediate;advanced;specialist): specialistVerification pending

Lifecycle · Versioning

Changelog/release notes(HTTPS URL): https://portswigger.net/burp/releasesVerified
Current version(1.12.3): 2026.10.1Verified
Maintenance status(active;maintenance;deprecated;EOL;archived): activeVerified

Vendor · Maintainer

Vendor type(commercial;foundation;community;government;consortium;individual): commercialVerification pending

Also categorized in

Web Application Scanners

User reviews

Review policy

No published reviews yet.