Try our new research platform with insights from 80,000+ expert users

GitLab vs PortSwigger Burp Suite Professional comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Oct 8, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

GitLab
Ranking in Application Security Tools
8th
Ranking in Static Application Security Testing (SAST)
8th
Ranking in Fuzz Testing Tools
2nd
Average Rating
8.6
Reviews Sentiment
7.2
Number of Reviews
82
Ranking in other categories
Build Automation (1st), Release Automation (2nd), Rapid Application Development Software (12th), Software Composition Analysis (SCA) (5th), Enterprise Agile Planning Tools (2nd), DevSecOps (3rd)
PortSwigger Burp Suite Prof...
Ranking in Application Security Tools
9th
Ranking in Static Application Security Testing (SAST)
6th
Ranking in Fuzz Testing Tools
1st
Average Rating
8.6
Reviews Sentiment
7.7
Number of Reviews
62
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of February 2025, in the Application Security Tools category, the mindshare of GitLab is 2.9%, up from 2.6% compared to the previous year. The mindshare of PortSwigger Burp Suite Professional is 2.0%, down from 2.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Application Security Tools
 

Featured Reviews

Gaurav Chandel - PeerSpot reviewer
Boosted productivity with automated pipelines and seamless collaboration
There are some challenges with repository file management as GitLab may struggle to manage larger files. Improvements could be made regarding size management and file partitioning. Also, the UI has remained the same for a couple of years and could benefit from an update with AI features and better customization.
Anuradha.Kapoor Kapoor - PeerSpot reviewer
Offers efficient scanning of entire websites but presence of false positive bugs, leading to time-consuming efforts in distinguishing real bugs from false alarms
We have found that so many times, false positive bugs are there, and then we spend a lot of time basically separating them from real bugs. So that's the reason we are looking for some other tool. So we were in discussion with Acunetix. Therefore, the false positive rate is, like, something that we would like to improve. What we are looking for is if this false positive rate goes down because we were OWASP Zap tool users, which was free anyway. But there were a lot of false positives there, and we used to spend a lot of time, like, for security reasons, reproducing those bugs for the development team to fix it. So then we thought, okay, why not we go with the tool? Even if it is not very expensive. But still, every year, we have to renew the license. And we got this tool. Again, we found that in this tool also, even if it is less, there are still a lot of false positive bugs out there. So we again have to spend so much time. So we hired a security tester, who was basically using Acunetix in his previous company for almost three years, and then you said that in that scanning is very slow. The scanning is also slow. Like, sometimes the site scan takes eight hours, six to eight hours. Yeah. And whereas in Acunetix, it took three to four hours. And plus, there are no false positives. I'm not saying none but there's very little. But here, the rate sometimes is very high. These are the two features I think we would like to improve further.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"I have had no problem with the stability of the solution."
"We like that we can have an all-encompassing product and don't have to implement different solutions."
"GitLab is being used as a repository for our codebase and it is a one stop DevOps tool we use in our team."
"GitLab's best features are maintenance, branch integration, and development infrastructure."
"The most valuable aspects of GitLab are the ability to create branches, merge branches, and compare branches to resolve code conflicts."
"The tool helps to integrate CI/CD pipeline deployments. It is very easy to learn. Its security model is good."
"The most valuable feature of GitLab is its convenience. I am able to trace back most of my changes up to a far distance in time and it helps me to analyze and see the older version of the code."
"GitLab's source control is excellent."
"It is useful for scanning and tracing activities."
"The intercepting feature is the most valuable."
"PortSwigger Burp Suite Professional is one of the best user-friendly solutions for getting the proxy set up."
"It was easy to learn."
"The solution scans web applications and supports APIs, which are the main features I really like."
"The automated scan is what I find most useful because a lot of customers will need it. Not every domain will be looking for complete security, they just need a stamp on the security key. For these kinds of customers, the scan works really well."
"PortSwigger Burp Suite does not hamper the node of the server, and it does not shut down the server if it is running."
"BurpSuite helps us to identify and fix silly mistakes that are sometimes introduced by our developers in their coding."
 

Cons

"Technologies are always changing. Nowadays, new things like serverless computing and workload management have emerged. We have noticed a few gap items for faster service delivery. For example, we do user interface testing in the latest team and automate it using some tools. Recently, we integrated a tool with user interface testing, which can simulate a multi-user environment. So, we would like to see more integration with different platforms."
"The solution does not have many built-in functions or variables so scripting is required."
"The documentation could be improved to help newcomers better understand things like creating new branches."
"GitLab can improve its user interface to make conflict resolution more user-friendly."
"The pricing has been substantially increased, which is a major concern."
"We have only seen a couple of issues on Gitlab, which we use for building some of the applications."
"GitLab should enhance its GitOps capability as they are currently using FluxCD, however, Argo CD is better and offers more features. GitLab should work on improving their user interface for GitOps as it is lagging behind."
"There are some challenges with repository file management as GitLab may struggle to manage larger files."
"The Initial setup is a bit complex."
"We wish that the Spider feature would appear in the same shape that it does in previous versions."
"Sometimes the solution can run a little slow."
"BurpSuite has some issues regarding authentication with OAT tokens that need to be improved."
"It would be beneficial to have privileged access management as a part of Burp Suite Professional."
"The pricing of the solution is quite high."
"The Iran market does not have after-sales support. PortSwigger Burp Suite Professional needs to provide after-sales support."
"The use of system memory is an area that can be improved because it uses a lot."
 

Pricing and Cost Advice

"GitLab is cheap."
"GitLab is a free solution to use."
"GitLab's pricing is good compared to others on the market."
"The solution's pricing is acceptable."
"The solution is based on a licensing model that includes technical support and is paid annually."
"The price is okay."
"There are different licensing options available, including a free limited-user license."
"In total, I believe we have more than 300 licenses spread over about 100 users, though I can't comment on the costs involved."
"We are using the community version, which is free."
"The pricing of the solution is reasonable. We only need to pay for the annual subscription. I rate the pricing five out of ten."
"PortSwigger is a bit expensive."
"PortSwigger Burp Suite Professional is an expensive solution."
"PortSwigger Burp Suite Professional is an expensive solution."
"We have one license. The price is very nominal."
"PortSwigger is reasonably-priced. It's fair."
"Pricing is not very high. It was around $200."
report
Use our free recommendation engine to learn which Application Security Tools solutions are best for your needs.
838,640 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Educational Organization
29%
Financial Services Firm
11%
Computer Software Company
11%
Manufacturing Company
8%
Computer Software Company
16%
Financial Services Firm
12%
Government
11%
Manufacturing Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about GitLab?
I find the features and version control history to be most valuable for our development workflow. These aspects provide us with a clear view of changes and help us manage requests efficiently.
What is your experience regarding pricing and costs for GitLab?
The pricing of GitLab is reasonable, aligning with what I consider to be average compared to competitors.
What needs improvement with GitLab?
There are missing search features, particularly when searching repositories or applying filters. Additionally, I have encountered issues with the deployment of CI/CD pipelines, especially dealing w...
Is OWASP Zap better than PortSwigger Burp Suite Pro?
OWASP Zap and PortSwigger Burp Suite Pro have many similar features. OWASP Zap has web application scanning available with basic security vulnerabilities while Burp Suite Pro has it available with ...
What do you like most about PortSwigger Burp Suite Professional?
The solution helped us discover vulnerabilities in our applications.
What is your experience regarding pricing and costs for PortSwigger Burp Suite Professional?
The pricing for Burp Suite Professional is not very high, however, it could be more flexible for clients.
 

Also Known As

Fuzzit
Burp
 

Overview

 

Sample Customers

1. NASA  2. IBM  3. Sony  4. Alibaba  5. CERN  6. Siemens  7. Volkswagen  8. ING  9. Ticketmaster  10. SpaceX  11. Adobe  12. Intuit  13. Autodesk  14. Rakuten  15. Unity Technologies  16. Pandora  17. Electronic Arts  18. Nordstrom  19. Verizon  20. Comcast  21. Philips  22. Deutsche Telekom  23. Orange  24. Fujitsu  25. Ericsson  26. Nokia  27. General Electric  28. Cisco  29. Accenture  30. Deloitte  31. PwC  32. KPMG
Google, Amazon, NASA, FedEx, P&G, Salesforce
Find out what your peers are saying about GitLab vs. PortSwigger Burp Suite Professional and other solutions. Updated: January 2025.
838,640 professionals have used our research since 2012.