Burp Suite by PortSwigger is a leading web app security testing toolkit. Compare Community, Professional, and Enterprise editions, pricing, and features.
Burp Suite is a web application security testing toolkit developed by PortSwigger, founded in 2008 by Dafydd Stuttard and based in Knutsford, UK. It combines an intercepting proxy, automated vulnerability scanner, and a set of manual testing tools used by penetration testers, bug bounty hunters, and application security teams worldwide.
PortSwigger has grown from Stuttard's solo project into one of the leading vendors in web application security testing, with Burp Suite reportedly used by more than 80,000 individuals and over 1,000 enterprise customers, and the company received a $112 million growth investment in 2024.
Burp Suite's toolset centers on an intercepting proxy that lets testers view and modify traffic between browser and server, Repeater for manually resending and tweaking individual requests, and Intruder for automating customized attacks such as parameter fuzzing. Professional and Enterprise editions add an automated Scanner that crawls applications and audits for common vulnerability classes.
Additional utilities include Decoder and Comparer for data encoding and diffing tasks, Sequencer for analyzing the randomness of session tokens, and the BApp Store, a marketplace of community-built extensions that expand Burp's functionality.
Burp Suite Community Edition is free but excludes the automated scanner and throttles Intruder speed. Burp Suite Professional costs $475 per user per year and unlocks the full scanner, unthrottled Intruder, BApp Store access, and Burp AI features.
Burp Suite Enterprise (marketed as Burp Suite DAST) is a separate CI/CD scanning product for teams, priced on request; real-world enterprise deals are commonly reported in the tens of thousands of dollars annually depending on scan frequency and support requirements.
Burp Suite Community Edition is free and includes the core manual testing toolkit, but it lacks the automated vulnerability scanner found in Professional and Enterprise editions.
Burp Suite Professional is priced at $475 per user per year.
Professional is a desktop application for manual and semi-automated testing by an individual tester. Enterprise (Burp Suite DAST) is a team-oriented, CI/CD-integrated scanning platform for scheduled scans across many applications.
Burp Suite is a Java-based desktop application that runs on Windows, macOS, and Linux.
Burp Suite is developed by PortSwigger, a UK company founded in 2008 by Dafydd Stuttard and headquartered in Knutsford, Cheshire.