PortSwigger Burp Suite Enterprise Edition offers features like dynamic and active scanning, CMDB and device discovery, CI/CD integration, ease of use, and extensions. Users appreciate automated scanning, vulnerability identification, parallel scans, and the ability to intercept and modify calls. Its integration capabilities and automation efficiency save time and money. Regular updates and custom script uploads enhance functionality, while its interface aids in vulnerability assessment and escalations, facilitating a comprehensive testing process.
- "The most appreciated functionality of PortSwigger Burp Suite is its ability to perform brute force attacks automatically."
- "Its automated scanning feature saves time."
- "The most valuable part of it was probably the ability to intercept and modify calls."
PortSwigger Burp Suite Enterprise Edition faces challenges with false positives and scan instability. Users find its implementation complex and costly, suggesting the need for a cloud-based option. Static code analysis, better scalability, and predefined attack payloads are requested. Many find performance inefficient, demanding excessive resources. The lack of code analysis and mobile features leaves unmet needs in competitive markets. They desire improvements in vulnerability detection and dynamic security testing integration.
- "It would be beneficial if Burp Suite provided predefined payloads for each attack category, such as SQL injection and cross-site scripting, to automate some tasks more effectively."
- "It would be beneficial if Burp Suite provided predefined payloads for each attack category, such as SQL injection and cross-site scripting, to automate some tasks more effectively."
- "Scalability could be better."
