PortSwigger Burp Suite Professional Reviews

Name: PortSwigger Burp Suite Professional
Brand: PortSwigger
Rating: 4.3 (62 reviews)

Vendor: PortSwigger

4.3 out of 5

62 reviews
98% willing to recommend

1,453 followers

Post review

What is PortSwigger Burp Suite Professional?

Burp Suite Professional, by PortSwigger, is the world’s leading toolkit for web security testing. Over 52,000 users worldwide, across all industries and organization sizes, trust Burp Suite Professional to find more vulnerabilities, faster. With expertly-engineered manual and automated tooling, you're able to test smarter - not harder.

Get the PortSwigger Burp Suite Professional Buyer's Guide and find out what your peers are saying about PortSwigger Burp Suite Professional, SonarQube Server (formerly SonarQube), Veracode and more!

PortSwigger Burp Suite Professional is the #1 ranked solution in top Fuzz Testing Tools, #6 ranked solution in AST tools, and #8 ranked solution in application security solutions. PeerSpot users give PortSwigger Burp Suite Professional an average rating of 8.6 out of 10. Based on the analysis of the 62 most recent PortSwigger Burp Suite Professional reviews, the overall sentiment is positive, with a sentiment score of 7.7. (Among the highest in the category). PortSwigger Burp Suite Professional is most commonly compared to SonarQube Server (formerly SonarQube): PortSwigger Burp Suite Professional vs SonarQube Server (formerly SonarQube). PortSwigger Burp Suite Professional is popular among the large enterprise segment, accounting for 62% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a computer software company, accounting for 17% of all views.

Buyer's Guide

PortSwigger Burp Suite Professional

December 2024

Get the report

Helped 824,053 peers since 2012

Featured reviews

Anton Krivonosov

Application Security Architect at Kuehne & Nagel Inc.

We use the solution for security assessments. It's a special tool for penetration testers or security specialists PortSwigger Burp Suite Professional is a standard tool in the security industry. It's a stable solution that has many features. You can download different plugins if you don't have…

Read full review

Anuradha.Kapoor Kapoor

Head - Quality Control at Net Solutions

We have found that so many times, false positive bugs are there, and then we spend a lot of time basically separating them from real bugs. So that's the reason we are looking for some other tool. So we were in discussion with Acunetix. Therefore, the false positive rate is, like, something that we would like to improve. What we are looking for is if this false positive rate goes down because we were OWASP Zap tool users, which was free anyway. But there were a lot of false positives there, and we used to spend a lot of time, like, for security reasons, reproducing those bugs for the development team to fix it. So then we thought, okay, why not we go with the tool? Even if it is not very expensive. But still, every year, we have to renew the license. And we got this tool. Again, we found that in this tool also, even if it is less, there are still a lot of false positive bugs out there. So we again have to spend so much time. So we hired a security tester, who was basically using Acunetix in his previous company for almost three years, and then you said that in that scanning is very slow. The scanning is also slow. Like, sometimes the site scan takes eight hours, six to eight hours. Yeah. And whereas in Acunetix, it took three to four hours. And plus, there are no false positives. I'm not saying none but there's very little. But here, the rate sometimes is very high. These are the two features I think we would like to improve further.

Read full review

Sonali Gedam

Qulity Engineer at Lloyds Banking Group PLC

From a security perspective, I have only found defects related to cookies. It would be good if the solution could give us more details about what exactly is defective, and it would be more helpful if it explored more to catch as many defects as possible, apart from cookie-related defects.

Read full review

PortSwigger Burp Suite Professional mindshare

Product category:

As of December 2024, the mindshare of PortSwigger Burp Suite Professional in the Application Security Tools category stands at 1.8%, down from 2.0% compared to the previous year, according to calculations based on PeerSpot user engagement data.

Application Security Tools

PeerAnalyst reports

Type	Title	Date
Category	Application Security Tools	Dec 21, 2024	Download
Product	Reviews, tips, and advice from real users	Dec 21, 2024	Download
Comparison	PortSwigger Burp Suite Professional vs SonarQube Server (formerly SonarQube)	Dec 21, 2024	Download
Comparison	PortSwigger Burp Suite Professional vs Veracode	Dec 21, 2024	Download
Comparison	PortSwigger Burp Suite Professional vs Checkmarx One	Dec 21, 2024	Download

Title	Rating	Mindshare	Recommending
SonarQube Server (formerly SonarQube)	4.0	26.7%	81%	113 interviews Add to research
Veracode	4.1	10.4%	90%	196 interviews Add to research

Valuable Features

PortSwigger Burp Suite Professional offers valuable features including a powerful scanner for detecting vulnerabilities, customizable payloads with Intruder, and manual testing tools like Repeater. It supports extensibility through the BApp store and strong community plugins. The intuitive user interface and dashboards enhance usability. Users appreciate the proxy for packet capture, web application crawling through Spider, excellent reporting capabilities, affordable pricing, and advanced scheduling, making it a top choice for security assessments.

"I rate PortSwigger Burp Suite Professional ten points out of ten."
"The technical support from PortSwigger is excellent, managing response time and quality efficiently without any issues."
"The most valuable feature of Burp Suite Professional is its ability to schedule tasks for scanning websites, which helps in performing regular checks of IP addresses."

Room for Improvement

PortSwigger Burp Suite Professional faces challenges such as high false positives, slow scanning speeds, and resource-intensive performance. The integration with other tools is complex for users seeking seamless connections. Reporting features are limited, lacking informative and customizable reports. Users express a need for more comprehensive documentation and user-friendly interface. Improvements might be necessary for handling token-based authentication and mobile app testing. The pricing is considered high, limiting accessibility for smaller organizations.

"It would be beneficial to have privileged access management as a part of Burp Suite Professional."
"It would be beneficial to have privileged access management as a part of Burp Suite Professional."
"Integration is a big problem."

ROI

PortSwigger Burp Suite Professional delivers a significant ROI, surpassing two hundred percent. It enhances client engagement and secures continuous contracts for application security testing. Known globally, Burp Suite holds its value as essential for both manual and automation testing. Multiple users attest to its worth and effectiveness, confirming that investing in Burp Suite yields favorable monetary returns through widespread recognition and success in initial client interactions.

Pricing

PortSwigger Burp Suite Professional offers a competitive pricing model with annual licensing fees generally ranging from $300 to $500 per user, often perceived as reasonable given the extensive features and functionality. Many users find it budget-friendly compared to other solutions, though some mention it can be costly depending on currency rates and regional differences. Setup costs are negligible with primarily standard licensing expenses. Multiple licensing options, including free versions, cater to varying enterprise needs.

"PortSwigger Burp Suite Professional is expensive compared to other tools."
"The platform's pricing is reasonable."
"PortSwigger Burp Suite Professional is an expensive solution."

Popular Use Cases

PortSwigger Burp Suite Professional is primarily used for application security testing, including vulnerability scanning, penetration testing, and intercepting mobile HTTP/HTTPS requests. Users employ it for ensuring web application security, identifying vulnerabilities, performing security assessments, and checking compliance with OWASP standards. It serves various needs like managing application traffic, testing input validation, and manipulating application behavior. Security professionals appreciate tools like the scanner module, intruder tools, and repeater function for comprehensive evaluation and testing.

Service and Support

PortSwigger Burp Suite Professional's customer service is frequently described as excellent. Technical support is generally responsive, with many users highlighting prompt email responses and helpful documentation. Several users find online resources and community support sufficient, reducing their need to contact technical support. Some faced delays in response or effectiveness, but most report satisfaction with the support team's efforts to resolve issues. Many users appreciate the instructional value of the documentation and blogs provided.

Deployment

PortSwigger Burp Suite Professional's initial setup is generally straightforward. Many found it easy to deploy within minutes using the executable JAR format. A few reported complexities, especially when configuring proxy and scanning options. Setup time varies, with some requiring just minutes while others spent longer, especially in organizational contexts. Documentation and videos are frequently mentioned as helpful resources. Most users found minimal maintenance is needed, and installation often requires just one person.

Scalability

PortSwigger Burp Suite Professional generally supports scalability when managed through multiple licenses and configurations. Many teams report successful deployment among numerous users. Issues arise primarily in the Professional edition, where single-user licenses limit scalability. The Enterprise version addresses these challenges by supporting multiple installations. While some users encounter performance glitches during extensive tasks, features like integration with other platforms through Jenkins help alleviate these concerns. The scaling capacity partially depends on the edition and licensing approach.

Stability

PortSwigger Burp Suite Professional is praised for its stability, though some experience memory-related crashes, especially when handling large sites or using lower RAM. Users find it reliable with minimal issues, highlighting its robust backup feature. Some point out occasional instability related to updates, but rate stability between seven to ten. While a few users note security and firewall challenges, most appreciate its performance. Maturity and consistent updates enhance its dependable reputation.

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our PortSwigger Burp Suite Professional Buyer's Guide for additional reliable information.

Review data by company size

By reviewers

By visitors reading reviews

Top industries

By visitors reading reviews

Computer Software Company

17%

Financial Services Firm

12%

Government

11%

Manufacturing Company

Healthcare Company

Comms Service Provider

Educational Organization

University

Retailer

Energy/Utilities Company

Media Company

Insurance Company

Construction Company

Non Profit

Real Estate/Law Firm

Hospitality Company

Outsourcing Company

Wholesaler/Distributor

Marketing Services Firm

Performing Arts

Recreational Facilities/Services Company

Transportation Company

Pharma/Biotech Company

Aerospace/Defense Firm

Logistics Company

Consumer Goods Company

Sports Company

Recruiting/Hr Firm

Legal Firm

Compare PortSwigger Burp Suite Professional with alternative products

Learn more about PortSwigger Burp Suite Professional

PortSwigger is the web security company that is enabling the world to secure the web. Over 50,000 security engineers rely on our software and expertise to secure their world.

PortSwigger Burp Suite Professional was previously known as Burp.