Try our new research platform with insights from 80,000+ expert users

Parasoft SOAtest vs PortSwigger Burp Suite Professional comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Oct 8, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Parasoft SOAtest
Ranking in Static Application Security Testing (SAST)
25th
Average Rating
8.2
Reviews Sentiment
7.1
Number of Reviews
31
Ranking in other categories
Functional Testing Tools (19th), API Testing Tools (10th), Test Automation Tools (18th)
PortSwigger Burp Suite Prof...
Ranking in Static Application Security Testing (SAST)
5th
Average Rating
8.6
Reviews Sentiment
7.9
Number of Reviews
63
Ranking in other categories
Application Security Tools (10th), Fuzz Testing Tools (1st)
 

Mindshare comparison

As of June 2025, in the Static Application Security Testing (SAST) category, the mindshare of Parasoft SOAtest is 0.5%, up from 0.4% compared to the previous year. The mindshare of PortSwigger Burp Suite Professional is 2.0%, down from 2.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Static Application Security Testing (SAST)
 

Featured Reviews

Milind Parab - PeerSpot reviewer
A stable solution that can be used for automotive compliance and generates good reports
Tuning the tool takes time because it gives quite a long list of warnings. Going through that is a challenge. It only happens in the initial stage when we are setting up the tool, but it can be improved. Parasoft SOAtest could add code coverage, which will help us do the coverage in a single tool.
Anuradha.Kapoor Kapoor - PeerSpot reviewer
Offers efficient scanning of entire websites but presence of false positive bugs, leading to time-consuming efforts in distinguishing real bugs from false alarms
We have found that so many times, false positive bugs are there, and then we spend a lot of time basically separating them from real bugs. So that's the reason we are looking for some other tool. So we were in discussion with Acunetix. Therefore, the false positive rate is, like, something that we would like to improve. What we are looking for is if this false positive rate goes down because we were OWASP Zap tool users, which was free anyway. But there were a lot of false positives there, and we used to spend a lot of time, like, for security reasons, reproducing those bugs for the development team to fix it. So then we thought, okay, why not we go with the tool? Even if it is not very expensive. But still, every year, we have to renew the license. And we got this tool. Again, we found that in this tool also, even if it is less, there are still a lot of false positive bugs out there. So we again have to spend so much time. So we hired a security tester, who was basically using Acunetix in his previous company for almost three years, and then you said that in that scanning is very slow. The scanning is also slow. Like, sometimes the site scan takes eight hours, six to eight hours. Yeah. And whereas in Acunetix, it took three to four hours. And plus, there are no false positives. I'm not saying none but there's very little. But here, the rate sometimes is very high. These are the two features I think we would like to improve further.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Good write and read files which save execution inputs and outputs and can be stored locally."
"Parasoft SOAtest has improved the quality of our automated web services, which can be easily implemented through service chaining and service virtualization."
"We have seen a return on investment."
"Since the solution has both command line and automation options, it generates good reports."
"If you want something that’s not provided out of the box, then you can write it yourself and integrate it with SOAtest."
"Technical support is helpful."
"We can automate our scenarios in a data driven format, which shows there is no rework on scripts. We only need to update the test data and run for a number of scenarios."
"Generating new messages, based on the existing .EDN and .XML messages, is a crucial part or the testing project that I’m currently in."
"It was easy to learn."
"PortSwigger Burp Suite Professional is one of the best user-friendly solutions for getting the proxy set up."
"The solution is stable."
"The suite testing models are very good. It's very secure."
"The automated scan is what I find most useful because a lot of customers will need it. Not every domain will be looking for complete security, they just need a stamp on the security key. For these kinds of customers, the scan works really well."
"For pentesting scenarios, this is the number one tool. It can capture the request, and there are so many functions that are very good for that. For example, a black box satellite host."
"It is useful for scanning and tracing activities."
"The most valuable feature of Burp Suite Professional is its ability to schedule tasks for scanning websites, which helps in performing regular checks of IP addresses."
 

Cons

"Parasoft SOAtest has an internal refresh function where you can refresh the software to show the changes you’ve made in your projects. Unfortunately this function does not work properly, because it often does not show the changes after you’ve hit te refresh button a few times."
"The performance could be a bit better."
"Reporting facilities can be better."
"UI testing should be more in-depth."
"Reports could be customized and more descriptive according to the user's or company's requirements."
"One area that could use improvement is the cryptography capabilities in Parasoft SOAtest. It did not support enough of the protocols or cryptography formats we needed, which led us to create our own solutions."
"The product is very slow to start up, and that is a bit of a problem, actually."
"During the process of working with SOAtest and building test cases, the .TST files will grow. A negative side effect is that saving your changes takes more time."
"The solution is not easy to set it up. You need a lot of knowledge."
"The biggest drawback is reporting. It's not so good. I can download them, but they're not so informative."
"It would be beneficial to have privileged access management as a part of Burp Suite Professional."
"You can have many false positives in Burp Suite. It depends on the scale of the penetration testing."
"There is a lot to this product, and it would be good if when you purchase the tool, they can provide us with a more extensive user manual."
"The biggest improvement that I would like to see from PortSwigger that today many people see as an issue in their testing. There might be a feature which might be desired."
"It would be good if the solution could give us more details about what exactly is defective."
"The scanner and crawler need to be improved."
 

Pricing and Cost Advice

"They do have a confusing licensing structure."
"The license price is a little expensive, but it provides a better outcome in terms of the end-to-end automation process."
"From what I understand, Parasoft SOAtest isn't the cheapest option. But it has a lot to offer."
"We are completed satisfied with Parasoft SOAtest. The ROI is more than 95%."
"It is an expensive product, so think carefully about whether it fits your purposes and is the right tool for you."
"The price is around $5,000 USD."
"I think it would be a great step to decrease the price of the licenses."
"The cost of Parasoft seems to have gotten higher with a projection that wasn't really stipulated for our company. They've done a tremendous job at negotiating those deals."
"Our licensing cost is approximately $400 USD per year."
"PortSwigger is a bit expensive."
"PortSwigger is reasonably-priced. It's fair."
"We are using the community version, which is free."
"There is no setup cost and the cost of licensing is affordable."
"They should reduce the license cost a little bit. It is $400 per user, and it would be better if they could reduce the licensing fee."
"There are multiple versions available of PortSwigger Burp Suite, such as enterprise, commercial, professional, and beginners."
"The solution used to be expensive. However, they have reduced the price to approximately $400.00 which is reasonable."
report
Use our free recommendation engine to learn which Static Application Security Testing (SAST) solutions are best for your needs.
859,129 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
24%
Manufacturing Company
15%
Computer Software Company
11%
University
5%
Computer Software Company
15%
Financial Services Firm
13%
Government
11%
Manufacturing Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about Parasoft SOAtest?
Since the solution has both command line and automation options, it generates good reports.
What is your experience regarding pricing and costs for Parasoft SOAtest?
Parasoft SOAtest is expensive, but it was acquired because the company was dissatisfied with Quick Test Pro. The new management does not want subscription tools around, aiming for scripted tests us...
What needs improvement with Parasoft SOAtest?
One area that could use improvement is the cryptography capabilities in Parasoft SOAtest. It did not support enough of the protocols or cryptography formats we needed, which led us to create our ow...
Is OWASP Zap better than PortSwigger Burp Suite Pro?
OWASP Zap and PortSwigger Burp Suite Pro have many similar features. OWASP Zap has web application scanning available with basic security vulnerabilities while Burp Suite Pro has it available with ...
What do you like most about PortSwigger Burp Suite Professional?
The solution helped us discover vulnerabilities in our applications.
What is your experience regarding pricing and costs for PortSwigger Burp Suite Professional?
I find the price of PortSwigger Burp Suite Professional to be very cost-efficient.
 

Also Known As

SOAtest
Burp
 

Overview

 

Sample Customers

Charter Communications, Sabre, Caesars Entertainment, Charles Schwab, ING, Intel, Northbridge Financial, Capital Services, WoodmenLife
Google, Amazon, NASA, FedEx, P&G, Salesforce
Find out what your peers are saying about Parasoft SOAtest vs. PortSwigger Burp Suite Professional and other solutions. Updated: June 2025.
859,129 professionals have used our research since 2012.