Try our new research platform with insights from 80,000+ expert users

Polyspace Code Prover vs PortSwigger Burp Suite Professional comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Oct 8, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Polyspace Code Prover
Ranking in Application Security Tools
19th
Average Rating
7.8
Reviews Sentiment
8.8
Number of Reviews
6
Ranking in other categories
No ranking in other categories
PortSwigger Burp Suite Prof...
Ranking in Application Security Tools
9th
Average Rating
8.6
Reviews Sentiment
7.9
Number of Reviews
63
Ranking in other categories
Static Application Security Testing (SAST) (6th), Fuzz Testing Tools (1st)
 

Mindshare comparison

As of March 2025, in the Application Security Tools category, the mindshare of Polyspace Code Prover is 1.2%, up from 0.7% compared to the previous year. The mindshare of PortSwigger Burp Suite Professional is 2.0%, up from 2.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Application Security Tools
 

Featured Reviews

Aman Singla - PeerSpot reviewer
Easy to setup with reliable outputs and good reliability
It is easy to set up the solution. We can actually modify it using script also. It's pretty easy to link it with our in-house toolchain with the Polyspace configuration settings. If we have small amounts of data, it's quick and you can set it up within ten to 15 minutes. However, depending on the size of the data and the variables, it could take a while since you have to provide a range for all variables. If you have, for example, 500 variables, you'll be configuring a lot. However, the input extremes can be fed using an Excel file or some other format.
Anuradha.Kapoor Kapoor - PeerSpot reviewer
Offers efficient scanning of entire websites but presence of false positive bugs, leading to time-consuming efforts in distinguishing real bugs from false alarms
We have found that so many times, false positive bugs are there, and then we spend a lot of time basically separating them from real bugs. So that's the reason we are looking for some other tool. So we were in discussion with Acunetix. Therefore, the false positive rate is, like, something that we would like to improve. What we are looking for is if this false positive rate goes down because we were OWASP Zap tool users, which was free anyway. But there were a lot of false positives there, and we used to spend a lot of time, like, for security reasons, reproducing those bugs for the development team to fix it. So then we thought, okay, why not we go with the tool? Even if it is not very expensive. But still, every year, we have to renew the license. And we got this tool. Again, we found that in this tool also, even if it is less, there are still a lot of false positive bugs out there. So we again have to spend so much time. So we hired a security tester, who was basically using Acunetix in his previous company for almost three years, and then you said that in that scanning is very slow. The scanning is also slow. Like, sometimes the site scan takes eight hours, six to eight hours. Yeah. And whereas in Acunetix, it took three to four hours. And plus, there are no false positives. I'm not saying none but there's very little. But here, the rate sometimes is very high. These are the two features I think we would like to improve further.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"When we work on safety modules, it is mandatory to fulfill ISO 26262 compliance. Using Prover helps fulfill the standard on top of many other quality checks, like division by zero, data type casts, and null pointer dereferences."
"The product detects memory corruptions."
"Polyspace Code Prover has made me realize it differs from other static code analysis tools because it runs the code. So it's quite distinct in that aspect."
"Polyspace Code Prover is a very user-friendly tool."
"The outputs are very reliable."
"The product has a good learning hub."
"The tool provides complimentary services. It allows you to add a lot of extensions, and you can get extensions quite often. It is quite a flexible application."
"The suite testing models are very good. It's very secure."
"It helps in API testing, where manual intervention was previously necessary for each payload."
"It offers very good accuracy. You can trust the results."
"There is no other tool like it. I like the intuitiveness and the plugins that are available."
"With the Extender Tab, if you know how to code then you can create a plugin and add it to Burp."
"Some of the extensions, available using Burp Extender, are also very good and we have found issues by using them."
 

Cons

"One of the main disadvantages is the time it takes to initiate the first run."
"I'd like the data to be taken from any format."
"The tool has some stability issues."
"Using Code Prover on large applications crashes sometimes."
"Automation could be a challenge."
"The reporting needs to be improved; it is very bad."
"It would be good if the solution could give us more details about what exactly is defective."
"There were a lot of false positives there, and we used to spend a lot of time, like, for security reasons, reproducing those bugs for the development team to fix it."
"Currently, the scanning is only available in the full version of Burp, and not in the Community version."
"The solution’s pricing could be improved."
"If your application uses multi-factor authentication, registration management cannot be automated."
"You can have many false positives in Burp Suite. It depends on the scale of the penetration testing."
"We wish that the Spider feature would appear in the same shape that it does in previous versions."
 

Pricing and Cost Advice

"We use the paid version."
"PortSwigger Burp Suite Professional is expensive compared to other tools."
"Burp Suite is affordable."
"It is a cheap solution, but it may not be cheaper than other solutions."
"PortSwigger Burp Suite Professional is an expensive solution."
"I rate the pricing a four out of ten."
"For a country such as Sri Lanka, the pricing is not reasonable."
"This is a value for money product."
"We pay a yearly licensing fee for the solution, which is neither cheap nor expensive."
report
Use our free recommendation engine to learn which Application Security Tools solutions are best for your needs.
842,672 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Manufacturing Company
39%
Computer Software Company
12%
Transportation Company
5%
Government
4%
Computer Software Company
16%
Financial Services Firm
13%
Government
12%
Manufacturing Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

What do you like most about Polyspace Code Prover?
When we work on safety modules, it is mandatory to fulfill ISO 26262 compliance. Using Prover helps fulfill the standard on top of many other quality checks, like division by zero, data type casts,...
What needs improvement with Polyspace Code Prover?
I'm still trying to use constraints with range propagation, but I can't get it to work properly, and I haven't found any documentation. It require support. There could be an issue with range propag...
Is OWASP Zap better than PortSwigger Burp Suite Pro?
OWASP Zap and PortSwigger Burp Suite Pro have many similar features. OWASP Zap has web application scanning available with basic security vulnerabilities while Burp Suite Pro has it available with ...
What do you like most about PortSwigger Burp Suite Professional?
The solution helped us discover vulnerabilities in our applications.
What is your experience regarding pricing and costs for PortSwigger Burp Suite Professional?
The pricing for Burp Suite Professional is not very high, however, it could be more flexible for clients.
 

Also Known As

No data available
Burp
 

Overview

 

Sample Customers

Alenia Aermacchi, CSEE Transport, Delphi Diesel Systems, EADS, Institute for Radiological Protection and Nuclear Safety, Korean Air, KOSTAL, Miracor, NASA Ames Research Center
Google, Amazon, NASA, FedEx, P&G, Salesforce
Find out what your peers are saying about Polyspace Code Prover vs. PortSwigger Burp Suite Professional and other solutions. Updated: March 2025.
842,672 professionals have used our research since 2012.