PortSwigger Burp Suite Professional Reviews

We use Burp Suite Professional for testing websites and checking some servers, primarily scanning IP addresses and checking which ports are open.

Burp Suite Professional saves time by allowing us to set up scans and then review the results later.

We use this solution for security testing, and application security.

We are basically a service provider, so whatever application goes out of our office, we use this to ensure that it is covered from an application security standpoint. So we run it using the tool and scan the application. That's what majorly we are using Burp Suite for. But not only that, we can even run manual test cases by playing with the tool. So, we are using it extensively.

We use PortSwigger Burp Suite to scan our internal banking journey. Where we have customer-based applications in the banking industry, we test performance and security to catch defects as easily as possible. That is why we use PortSwigger Burp Suite.

The solution scans web applications and supports APIs, which are the main features I really like. It is also user-friendly. We only have to integrate the proxy and give a URL, and then the solution starts intercepting and scanning all the pages of our application.

The solution is very user-friendly and easy to use. Once you start using it, you will understand everything because the details they have mentioned are super informative.

We use the solution for security assessments. It's a special tool for penetration testers or security specialists.

PortSwigger Burp Suite Professional is a standard tool in the security industry. It's a stable solution that has many features. You can download different plugins if you don't have them in the standard edition. You can also write your own plugins if you know how to do it.

The Repeater and the BApp extensions are particularly useful. Certain extensions, such as the Active Scan extensions and the Autoracer extension, are very good. 

The crawling functionality has improved, but I would say that in the past, the spider mechanism was more efficient than the current crawling method. 

Generally, I don't rely solely on the Burp Scanner, but I utilize BApp extensions to achieve better results than the standard scanner. Mostly, I always rely on external extensions, specifically those that provide better results.

I would like to see the return of the spider mechanism instead of the crawling feature. Burp Suite's earlier version 1.7 had an excellent spider option, and it would be beneficial if Burp incorporated those features into the current version. 

The crawling techniques used in the current version are not as efficient as those used in earlier versions.

We are the resellers and not the customers. Usually, our customers use the solution's vulnerability scanner to check problems with their websites and web applications. While I cannot disclose specific customer names due to our NDA agreements, they normally use the solution to address issues with their web services.

The solution has a limited range of functions, which is good for small companies. This is because, in small companies, websites are less complex. They also have single services which makes the solution good enough for them. However, the most advantageous aspect of the solution is its affordable price.

I use PortSwigger Burp Suite Professional for penetration testing.

Burp has strong suite features. I especially value the features for penetration testing.

We use it for application security testing purposes. We scan our solutions and then look for issues in them. Upon finding the issues, we send them to the development team who fixes them. However, we use Burp Suite only for a specific client, hence we only have one license and limited use.

The solution is quite helpful for session management and configuration.