PortSwigger Burp Suite Professional Reviews

We use this solution for security testing, and application security.

We are basically a service provider, so whatever application goes out of our office, we use this to ensure that it is covered from an application security standpoint. So we run it using the tool and scan the application. That's what majorly we are using Burp Suite for. But not only that, we can even run manual test cases by playing with the tool. So, we are using it extensively.

We use PortSwigger Burp Suite to scan our internal banking journey. Where we have customer-based applications in the banking industry, we test performance and security to catch defects as easily as possible. That is why we use PortSwigger Burp Suite.

The solution scans web applications and supports APIs, which are the main features I really like. It is also user-friendly. We only have to integrate the proxy and give a URL, and then the solution starts intercepting and scanning all the pages of our application.

The solution is very user-friendly and easy to use. Once you start using it, you will understand everything because the details they have mentioned are super informative.

We use Burp Suite Professional for testing websites and checking some servers, primarily scanning IP addresses and checking which ports are open.

Burp Suite Professional saves time by allowing us to set up scans and then review the results later.

We use the solution for security assessments. It's a special tool for penetration testers or security specialists.

PortSwigger Burp Suite Professional is a standard tool in the security industry. It's a stable solution that has many features. You can download different plugins if you don't have them in the standard edition. You can also write your own plugins if you know how to do it.

The solution is for web security testing and the primary use is to eliminate the false positives.

This solution has helped our company in many ways. PortSwigger Acadamy has given us the knowledge to be able to do deeper tests. The effectiveness of the tests is directly proportional to your knowledge about security testing. Even if you do not have this knowledge at the beginning you still you can perform some kind of testing. If you do not know how to choose your payload then it is going to suggest the built-in payloads to which you can perform those test attacks.

You do not need to be an expert to use the solution, an intermediate skilled person can use it and over time they can become an expert. Sometimes it is difficult to find skilled employees to start working in this field for your company but with PortSwigger the new employee does not have to be an expert because they are able to grow quite quickly in their knowledge.

The Repeater and the BApp extensions are particularly useful. Certain extensions, such as the Active Scan extensions and the Autoracer extension, are very good. 

The crawling functionality has improved, but I would say that in the past, the spider mechanism was more efficient than the current crawling method. 

Generally, I don't rely solely on the Burp Scanner, but I utilize BApp extensions to achieve better results than the standard scanner. Mostly, I always rely on external extensions, specifically those that provide better results.

I would like to see the return of the spider mechanism instead of the crawling feature. Burp Suite's earlier version 1.7 had an excellent spider option, and it would be beneficial if Burp incorporated those features into the current version. 

The crawling techniques used in the current version are not as efficient as those used in earlier versions.

We are the resellers and not the customers. Usually, our customers use the solution's vulnerability scanner to check problems with their websites and web applications. While I cannot disclose specific customer names due to our NDA agreements, they normally use the solution to address issues with their web services.

The solution has a limited range of functions, which is good for small companies. This is because, in small companies, websites are less complex. They also have single services which makes the solution good enough for them. However, the most advantageous aspect of the solution is its affordable price.

We use PortSwigger Burp Suite Professional for security. I'm a security tester and I need it for my daily activities, I require it.

PortSwigger Burp Suite Professional has improved the organization by providing the security standards of the applications across the organization.

We can test the weakness or loopholes in the application an attacker can use. We have an internal team that conducts the pen-testing from a hacker's point of view and try to close the issue before it is opened to the internet.