Burp Suite
Burp Suite is PortSwigger’s web application DAST platform, used to crawl running applications, map attack surface, and run active and passive vulnerability scans without source-code instrumentation. It is best known in application security teams for black-box testing of HTTP/HTTPS applications, with enterprise options for scheduled scanning and centralized management. Burp Suite Professional is aimed at manual testers and pentesters, while Burp Suite DAST serves teams that need repeatable scanning across many web apps and CI/CD workflows. The product is focused on discovering runtime flaws such as injection, authentication, access-control, and client-side issues.
Visit websiteAsk about pricing, alternatives, or if Burp Suite is right for you.
The Picari read
Burp Suite is a black-box web application security testing platform centered on DAST, with crawling, active scanning, passive analysis, and out-of-band checks. It is best suited to AppSec and pentest teams that need detailed runtime testing of HTTP/HTTPS applications and repeatable scans across many services.
- Organizations and security teams focused on comprehensive black-box dynamic application security testing (DAST) for web applications, particularly those with complex authentication flows or needing integration into CI/CD pipelines.
- Automated DAST in CI/CD pipelines
- Manual penetration testing of web applications
- Discovery of runtime vulnerabilities like injection and access control issues
- Continuous security assessment of web portfolios
Product catalogue
Burp Suite pricing and integrations
For Burp Suite integration and pricing details, ask Picari. Start a briefing with your question, such as whether it connects to your SIEM, identity provider and ticketing stack, or how it is priced at your seat count and data volume.
Unverified profile
This profile hasn't been verified by Burp Suite yet. Information may be incomplete.
Are you from Burp Suite? Verify this profileProfile last updated on 6 September 2026 by Picari.