About Burp Suite
Burp Suite is a web security testing toolkit from PortSwigger. Penetration testers and bug bounty hunters use it to find flaws in web applications.
What it does
Burp Suite sits between your browser and a web application as a proxy, so you can inspect and change requests and responses. It includes manual testing tools for hands-on work, and the paid editions add an automated scanner. A separate DAST product targets automated scanning for larger teams that want scans running in their delivery pipeline.
Key features
- Intercepts and edits web traffic with a proxy
- Manual testing tools for requests and responses
- Automated vulnerability scanning in paid editions
- Used for bug bounty hunting
- CI-driven scanning in the DAST product
Who it's for
Burp Suite fits penetration testers, bug bounty hunters and AppSec teams who test web apps by hand and want deep control. Developers who only want a quick automated check may prefer lighter tools.
Pricing and good to know
A Community Edition is free and includes the manual tools that suit learning and basic testing. Professional and DAST are paid products, and the website has a product comparison page that explains the differences. Check the current license terms before using it for commercial client work.
Highlights
- Intercepts and edits web traffic with a proxy
- Manual testing tools for requests and responses
- Automated vulnerability scanning in paid editions
- Used for bug bounty hunting
- CI-driven scanning in the DAST product
