Burp Suite logo
    Vendor

    Burp Suite

    Burp Suite is PortSwigger’s web application DAST platform, used to crawl running applications, map attack surface, and run active and passive vulnerability scans without source-code instrumentation.

    Start with a briefWebsite

    Be the first to recommend

    Burp Suite is a black-box web application security testing platform centered on DAST, with crawling, active scanning, passive analysis, and out-of-band checks. It is best suited to AppSec and pentest teams that need detailed runtime testing of HTTP/HTTPS applications and repeatable scans across many services.

    • Organizations and security teams focused on comprehensive black-box dynamic application security testing (DAST) for web applications, particularly those with complex authentication flows or needing integration into CI/CD pipelines.
    • Automated DAST in CI/CD pipelines
    • Manual penetration testing of web applications
    • Discovery of runtime vulnerabilities like injection and access control issues
    • Continuous security assessment of web portfolios
    Next Step
    Considering Burp Suite?

    Ask about pricing, alternatives, or if Burp Suite is right for you.

    Personalized fit analysis
    See relevant alternatives
    Run an evaluation when you're ready

    For Burp Suite integration and pricing details, ask Picari. Start a briefing with your question, such as whether it connects to your SIEM, identity provider and ticketing stack, or how it is priced at your seat count and data volume.

    Unverified profile

    This profile hasn't been verified by Burp Suite yet. Information may be incomplete.

    Are you from Burp Suite? Verify this profile

    Profile last updated on 16 October 2026 by Picari.