"When we are integrating it with SSC, we're able to scan and trace and see all of the vulnerabilities. Comparison is easy in SSC."
"The solution is able to detect a wide range of vulnerabilities. It's better at it than other products."
"The solution is easy to use."
"Reporting, centralized dashboard, and bird's eye view of all vulnerabilities are the most valuable features."
"The most valuable feature of this solution is the ability to make our customers more secure."
"The most valuable feature of PortSwigger Burp Suite Professional is the advanced features, user-friendly interface, and integration with other tools."
"The solution has a pretty simple setup."
"I find the attack model quite amazing, where I can write my scripts and load my scripts as well, which helps quite a bit. All the active scanning that it can do is also quite a lot helpful. It speeds up our vulnerability assessment and penetration testing. Right now, I am enjoying its in-browser, which also helps quite a bit. I'm always confused about setting up some proxy, but it really is the big solution we all want."
"The automated scan is what I find most useful because a lot of customers will need it. Not every domain will be looking for complete security, they just need a stamp on the security key. For these kinds of customers, the scan works really well."
"We use the solution for vulnerability assessment in respect of the application and the sites."
"I have found this solution has more plugins than other competitors which is a benefit. You are able to attach different plugins to the security scan to add features. For example, you can check to see if there are any payment systems that exist on a server, or username and password brute force analysis."
"The solution is stable."
"The reporting part is the most valuable. It also has very good features. We use almost all of the features for different kinds of customers and needs."
"Lately, we've seen more false negatives."
"The scanner could be better."
"It requires improvement in terms of scanning. The application scan heavily utilizes the resources of an on-premise server. 32 GB RAM is very high for an enterprise web application."
"A localized version, for example, in Korean would be a big improvement to this solution."
"One thing that is not up to the mark in PortSwigger is web application testing. I found some issues with its performance and reporting. They should work on these and give us a better outcome."
"PortSwigger Burp Suite Professional can improve by having more features in the free version for beginners to try."
"If we're running a huge number of scans regularly, it slows down the tool."
"We'd like to have more integration potential across all versions of the product."
"We wish that the Spider feature would appear in the same shape that it does in previous versions."
"It should provide a better way to integrate with Jenkins so that DAST (dynamic application security testing) can be automated."
"One area that can be improved, when compared to alternative tools, is that they could provide different reporting options and in different formats like PDF or something like that."
"The use of system memory is an area that can be improved because it uses a lot."
More PortSwigger Burp Suite Professional Pricing and Cost Advice →
Fortify WebInspect is ranked 1st in Dynamic Application Security Testing (DAST) with 5 reviews while PortSwigger Burp Suite Professional is ranked 5th in Application Security Tools with 21 reviews. Fortify WebInspect is rated 7.6, while PortSwigger Burp Suite Professional is rated 8.6. The top reviewer of Fortify WebInspect writes "Good reporting and vulnerability management, but needs better performance and resource utilization". On the other hand, the top reviewer of PortSwigger Burp Suite Professional writes "Best for manual penetration testing, a great user interface, and offers good scanning capabilities". Fortify WebInspect is most compared with Micro Focus Fortify on Demand, OWASP Zap, Veracode, HCL AppScan and Acunetix, whereas PortSwigger Burp Suite Professional is most compared with OWASP Zap, Acunetix, Veracode, Qualys Web Application Scanning and Invicti. See our Fortify WebInspect vs. PortSwigger Burp Suite Professional report.
We monitor all Dynamic Application Security Testing (DAST) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.
