Try our new research platform with insights from 80,000+ expert users

Polyspace Code Prover vs PortSwigger Burp Suite Professional comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Oct 8, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Polyspace Code Prover
Ranking in Application Security Tools
18th
Average Rating
7.8
Reviews Sentiment
8.8
Number of Reviews
6
Ranking in other categories
No ranking in other categories
PortSwigger Burp Suite Prof...
Ranking in Application Security Tools
9th
Average Rating
8.6
Reviews Sentiment
7.7
Number of Reviews
62
Ranking in other categories
Static Application Security Testing (SAST) (6th), Fuzz Testing Tools (1st)
 

Mindshare comparison

As of February 2025, in the Application Security Tools category, the mindshare of Polyspace Code Prover is 1.1%, up from 0.7% compared to the previous year. The mindshare of PortSwigger Burp Suite Professional is 2.0%, down from 2.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Application Security Tools
 

Featured Reviews

Aman Singla - PeerSpot reviewer
Easy to setup with reliable outputs and good reliability
It is easy to set up the solution. We can actually modify it using script also. It's pretty easy to link it with our in-house toolchain with the Polyspace configuration settings. If we have small amounts of data, it's quick and you can set it up within ten to 15 minutes. However, depending on the size of the data and the variables, it could take a while since you have to provide a range for all variables. If you have, for example, 500 variables, you'll be configuring a lot. However, the input extremes can be fed using an Excel file or some other format.
Anuradha.Kapoor Kapoor - PeerSpot reviewer
Offers efficient scanning of entire websites but presence of false positive bugs, leading to time-consuming efforts in distinguishing real bugs from false alarms
We have found that so many times, false positive bugs are there, and then we spend a lot of time basically separating them from real bugs. So that's the reason we are looking for some other tool. So we were in discussion with Acunetix. Therefore, the false positive rate is, like, something that we would like to improve. What we are looking for is if this false positive rate goes down because we were OWASP Zap tool users, which was free anyway. But there were a lot of false positives there, and we used to spend a lot of time, like, for security reasons, reproducing those bugs for the development team to fix it. So then we thought, okay, why not we go with the tool? Even if it is not very expensive. But still, every year, we have to renew the license. And we got this tool. Again, we found that in this tool also, even if it is less, there are still a lot of false positive bugs out there. So we again have to spend so much time. So we hired a security tester, who was basically using Acunetix in his previous company for almost three years, and then you said that in that scanning is very slow. The scanning is also slow. Like, sometimes the site scan takes eight hours, six to eight hours. Yeah. And whereas in Acunetix, it took three to four hours. And plus, there are no false positives. I'm not saying none but there's very little. But here, the rate sometimes is very high. These are the two features I think we would like to improve further.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"When we work on safety modules, it is mandatory to fulfill ISO 26262 compliance. Using Prover helps fulfill the standard on top of many other quality checks, like division by zero, data type casts, and null pointer dereferences."
"Polyspace Code Prover is a very user-friendly tool."
"The product detects memory corruptions."
"The outputs are very reliable."
"Polyspace Code Prover has made me realize it differs from other static code analysis tools because it runs the code. So it's quite distinct in that aspect."
"PortSwigger Burp Suite Professional has an intercept tab that helps us to scan our APIs, set the response, and request errors."
"The product has a good learning hub."
"PortSwigger Burp Suite Professional is one of the best user-friendly solutions for getting the proxy set up."
"I have found the best features to be the performance and there are a lot of additional plugins available."
"The solution helped us discover vulnerabilities in our applications."
"The extension that it provides with the community version for the skills mapping is excellent."
"It is a time-saver application."
"The most valuable feature is Burp Collaborator."
 

Cons

"Using Code Prover on large applications crashes sometimes."
"Automation could be a challenge."
"The tool has some stability issues."
"I'd like the data to be taken from any format."
"One of the main disadvantages is the time it takes to initiate the first run."
"The number of false positives need to be reduced on the solution."
"I would like to see a more optimized solution, as it currently uses a lot of CPU power and memory."
"Integration is a big problem."
"The solution doesn't offer very good scalability."
"The use of system memory is an area that can be improved because it uses a lot."
"The solution lacks sufficient stability."
"Improvement should be done as per the requirements of customers."
"The biggest drawback is reporting. It's not so good. I can download them, but they're not so informative."
 

Pricing and Cost Advice

"We use the paid version."
"I rate the pricing a four out of ten."
"The pricing of the solution is reasonable. We only need to pay for the annual subscription. I rate the pricing five out of ten."
"They should reduce the license cost a little bit. It is $400 per user, and it would be better if they could reduce the licensing fee."
"The price for the solution is expensive and could be cheaper. We pay an annual license and our team has several of them."
"PortSwigger Burp Suite Professional is an expensive solution."
"We are using the community version, which is free."
"We pay a yearly licensing fee for the solution, which is neither cheap nor expensive."
"PortSwigger Burp Suite Professional is expensive compared to other tools."
report
Use our free recommendation engine to learn which Application Security Tools solutions are best for your needs.
838,713 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Manufacturing Company
38%
Computer Software Company
12%
Transportation Company
5%
Government
4%
Computer Software Company
16%
Financial Services Firm
12%
Government
11%
Manufacturing Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

What do you like most about Polyspace Code Prover?
When we work on safety modules, it is mandatory to fulfill ISO 26262 compliance. Using Prover helps fulfill the standard on top of many other quality checks, like division by zero, data type casts,...
What needs improvement with Polyspace Code Prover?
I'm still trying to use constraints with range propagation, but I can't get it to work properly, and I haven't found any documentation. It require support. There could be an issue with range propag...
Is OWASP Zap better than PortSwigger Burp Suite Pro?
OWASP Zap and PortSwigger Burp Suite Pro have many similar features. OWASP Zap has web application scanning available with basic security vulnerabilities while Burp Suite Pro has it available with ...
What do you like most about PortSwigger Burp Suite Professional?
The solution helped us discover vulnerabilities in our applications.
What is your experience regarding pricing and costs for PortSwigger Burp Suite Professional?
The pricing for Burp Suite Professional is not very high, however, it could be more flexible for clients.
 

Also Known As

No data available
Burp
 

Overview

 

Sample Customers

Alenia Aermacchi, CSEE Transport, Delphi Diesel Systems, EADS, Institute for Radiological Protection and Nuclear Safety, Korean Air, KOSTAL, Miracor, NASA Ames Research Center
Google, Amazon, NASA, FedEx, P&G, Salesforce
Find out what your peers are saying about Polyspace Code Prover vs. PortSwigger Burp Suite Professional and other solutions. Updated: January 2025.
838,713 professionals have used our research since 2012.