Burp Suite Professional, by PortSwigger, is the world’s leading toolkit for web security testing. Over 52,000 users worldwide, across all industries and organization sizes, trust Burp Suite Professional to find more vulnerabilities, faster. With expertly-engineered manual and automated tooling, you're able to test smarter - not harder.
| Product | Market Share (%) |
|---|---|
| PortSwigger Burp Suite Professional | 2.2% |
| SonarQube Server (formerly SonarQube) | 22.4% |
| Checkmarx One | 10.3% |
| Other | 65.1% |
| Type | Title | Date | |
|---|---|---|---|
| Category | Application Security Tools | Aug 27, 2025 | Download |
| Product | Reviews, tips, and advice from real users | Aug 27, 2025 | Download |
| Comparison | PortSwigger Burp Suite Professional vs SonarQube Server (formerly SonarQube) | Aug 27, 2025 | Download |
| Comparison | PortSwigger Burp Suite Professional vs Veracode | Aug 27, 2025 | Download |
| Comparison | PortSwigger Burp Suite Professional vs Checkmarx One | Aug 27, 2025 | Download |
| Title | Rating | Mindshare | Recommending | |
|---|---|---|---|---|
| SonarQube Server (formerly SonarQube) | 4.0 | 22.4% | 81% | 116 interviewsAdd to research |
| GitLab | 4.2 | 2.6% | 97% | 85 interviewsAdd to research |
| Company Size | Count |
|---|---|
| Small Business | 16 |
| Midsize Enterprise | 14 |
| Large Enterprise | 27 |
| Company Size | Count |
|---|---|
| Small Business | 185 |
| Midsize Enterprise | 118 |
| Large Enterprise | 459 |
PortSwigger is the web security company that is enabling the world to secure the web. Over 50,000 security engineers rely on our software and expertise to secure their world.
PortSwigger Burp Suite Professional was previously known as Burp.
Google, Amazon, NASA, FedEx, P&G, Salesforce
| Author info | Rating | Review Summary |
|---|---|---|
| Cyber security manager at a tech services company with 11-50 employees | 4.5 | I use Burp Suite Professional for website testing and server scanning, particularly for IP addresses and port checks. Its task scheduling feature is valuable, but it could improve with privileged access management. I also use Nessus for cheaper external scanning. |
| Application Security Architect at Kuehne & Nagel Inc. | 5.0 | I use PortSwigger Burp Suite Professional for security assessments, finding it indispensable for penetration testing with its comprehensive features and plugin support. Although the pricing could be improved, it outperforms the free OWASP ZAP, making it worth the investment. |
| Team Lead at dhabsc | 4.0 | I find PortSwigger Burp Suite Professional highly valuable for its Repeater and BApp extensions, despite preferring the older spider mechanism over the current crawling feature. I've consistently relied on Burp Suite for application security testing alongside Zap Framework. |
| Head - Quality Control at Net Solutions | 3.5 | We use PortSwigger Burp Suite Professional for security testing due to its scanning features, though we struggle with high false positive rates. Previously, we tried OWASP Zap and Acunetix, valuing Burp Suite's affordability despite its scanning speed issues. |
| Information Security Engineer at Tübitak Bilgem | 5.0 | I use PortSwigger Burp Suite Professional primarily for penetration testing due to its strong suite features. However, there is room for improvement, particularly in composition, and adding AI features could enhance its functionality. |
| Qulity Engineer at Lloyds Banking Group PLC | 3.5 | I use PortSwigger Burp Suite Professional to test our banking application's performance and security due to its user-friendly interface and effective scanning of web applications and APIs. However, it could improve in providing detailed defect insights beyond cookies. |
| Test Lead at a financial services firm with 10,001+ employees | 4.0 | I found PortSwigger Burp Suite Professional to be an effective manual penetration testing tool and easy to learn. However, it struggles with automating multi-factor authentication and session management, particularly in the enterprise edition, affecting its integration into pipelines. |
| Senior Cyber Security Analyst at a tech services company with 201-500 employees | 4.5 | As a penetration tester, I find Burp Suite Professional invaluable for its automated scanning and features that simplify finding vulnerabilities. However, its integration into CI/CD pipelines is challenging and requires more technical knowledge compared to alternatives like SAP. |
