PortSwigger Burp Suite

PortSwigger's Burp Suite has set the standard for web security testing for more than 20 years, with the flagship lineup split into distinct editions for different use cases: Burp Suite Professional, described as the world's number one web penetration testing toolkit; Burp Suite DAST, an enterprise-enabled dynamic web vulnerability scanner; and Burp Suite Community Edition, a free set of manual tools for getting started with web security testing. A newer Burp AI (Burp AT) adds agentic AI that extends human-led penetration testing rather than replacing the tester.

Burp Scanner, the core vulnerability-scanning engine behind these editions, gives teams attack surface visibility to prioritize manual testing and free up tester time, alongside CI-driven scanning for finding and fixing vulnerabilities earlier in the development pipeline. Solution pages on PortSwigger's site are organized around specific use cases: DevSecOps (catching critical bugs before shipping), penetration testing acceleration, automated scanning at scale, bug bounty hunting, and compliance-driven security monitoring.

PortSwigger publishes a direct product comparison explaining the difference between Burp Suite Professional and Burp Suite DAST specifically, reflecting that the two serve different buyers (individual penetration testers versus enterprise-wide automated scanning programs). Pricing is not published on the general product page; prospective customers use the getting-started pages for either Professional or DAST to see current terms.