Burp Suite
PortSwigger's web security testing toolkit, with a free Community Edition and a paid Professional edition.
- Verified facts
- 7 of 7
- Alternatives ranked
- 4
- Approved reviews
- 0
- Visits sent from here
- 0
About Burp Suite
Burp Suite is the standard toolkit for testing web application security. It sits between your browser and the target site as an intercepting proxy, so you can inspect and change HTTP and WebSocket traffic, replay requests in Repeater, fuzz parameters with Intruder, and decode or compare data. The free Community Edition includes the manual tools and a demo version of Intruder. Burp Suite Professional adds the automated web vulnerability scanner, full-speed Intruder, saved project files and pro-only extensions, sold as an annual per-user licence. PortSwigger also sells Burp Suite DAST for scheduled, CI-driven scanning across many sites, and runs the free Web Security Academy for learning. It is a Java desktop app for Windows, macOS and Linux, extensible through the BApp Store and an API. Pentesters, bug bounty hunters and AppSec teams are the main users.
Best for: Pentesters and bug bounty hunters doing hands-on web application testing.
Pros and cons
What works
- Industry-standard proxy, Repeater and Intruder workflow
- Free Community Edition for learning and manual testing
- Large extension library and free training from PortSwigger
Why people leave
- The scanner and full-speed Intruder require the paid Professional licence
- Community Edition can't save projects
- Java-based UI can be heavy on memory during big tests
Top Burp Suite alternatives
See all 4- 1
ZAP66.5Free and open source, with an intercepting proxy and automated scanner that need no paid licence.
- 2
Caido62.6Newer, lighter web proxy with a free tier, fast HTTPQL filtering and a cheaper paid plan.
- 3
mitmproxy52.6Free, scriptable intercepting proxy for testers who prefer Python and the command line.
- 4
Tenable Nessus40.0Covers network and host vulnerability scanning beyond web applications.
Why people left Burp Suite
In reviewers' own words, from reviews of the apps they moved to. These are their opinions, not ours.
No switching stories yet. If you moved away from Burp Suite, review the app you switched to and tell us why.
Reviews
No approved reviews yet. How we verify reviewers
Write a review of Burp Suite
Burp Suite: common questions
Is Burp Suite free?
Burp Suite has a free plan and paid plans. Free plan: Yes, Community Edition (checked on Burp Suite's own site).
Is Burp Suite open source?
No, Burp Suite is not open source. Open-source alternatives include ZAP and mitmproxy.
What platforms does Burp Suite run on?
Burp Suite is available for Windows, macOS and Linux.
What are the best alternatives to Burp Suite?
The highest-ranked Burp Suite alternatives right now are ZAP, Caido and mitmproxy. See the full ranked list for pricing, platforms and verified facts.