--- title: Burp Suite Reviews meta_title: 'Burp Suite Reviews 2026: Details, Pricing, & Features | G2' meta_description: Filter 129 reviews by the users' company size, role or industry to find out how Burp Suite works for a business like yours. aggregate_rating: rating_value: 4.8 review_count: 129 scale: '5' date_modified: '2026-07-13' parent_category: name: "DevSecOps\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t" url: https://www.g2.com/categories/devsecops --- # Burp Suite Reviews **Vendor:** PortSwigger **Category:** [Vulnerability Scanner Software](https://www.g2.com/categories/vulnerability-scanner) **Average Rating:** 4.8/5.0 **Total Reviews:** 129 ## About Burp Suite Burp Suite is a complete ecosystem for web application and API security testing, combining two products: Burp Suite DAST - a best-of-breed, precision DAST solution that automates runtime testing, and Burp Suite Professional - the industry-standard toolkit for manual penetration testing. Developed by PortSwigger, more than 85,000 security professionals rely on Burp Suite to find, verify, and understand vulnerabilities across complex modern web applications. Burp Suite DAST is PortSwigger’s enterprise dynamic application security testing (DAST) solution, purpose-built for continuous, automated scanning of web applications and APIs. Unlike many DAST solutions, which are part of a wider AST offering, Burp Suite DAST is not a bolt-on tool - instead it’s precision-built from over 20 years of dynamic testing experience. Burp Suite DAST reveals the runtime issues that static analysis tools miss, such as authentication flaws, configuration drift, and chained vulnerabilities. Built on the same proprietary scanning engine that powers Burp Suite Professional, it delivers precise, low-noise results that security teams trust. Key capabilities of Burp Suite DAST include: Continuous, automated scanning of web applications and APIs, integration with CI/CD pipelines and vulnerability management tools, flexible deployment across cloud, and on-premise environments, shared scanning logic and configurations between automated and manual testing, accurate, low-noise detection informed by PortSwigger Research. Burp Suite Professional complements DAST with deep manual testing capability. It’s the industry-standard toolkit for penetration testers, consultants, and AppSec engineers who need complete insight and flexibility when validating or exploring vulnerabilities. Findings discovered by DAST can be investigated and verified in Burp Suite Professional, ensuring every result is accurate, contextual, and actionable. Together, Burp Suite DAST and Burp Suite Professional create a unified ecosystem that delivers automation at breadth and manual depth where it counts. Burp Suite is built for AppSec teams who need scalable, trustworthy coverage across web and API environments, enabling a seamless handoff between automated and manual testing. ## Burp Suite Pros & Cons **What users like:** - Users praise the **ease of use** of Burp Suite, appreciating its intuitive interface and quick setup for efficient testing. (12 reviews) - Users appreciate the **user-friendly interface** of Burp Suite, making traffic interception and parameter changes effortless. (8 reviews) - Users value the **deep automation and manual testing capabilities** of Burp Suite, enhancing their web application security assessments. (7 reviews) - Users praise the **user-friendly interface** of Burp Suite, making it efficient and enjoyable for security professionals. (5 reviews) - Users appreciate Burp Suite's **clear and user-friendly interface** , allowing effortless navigation and efficient traffic interception. (4 reviews) - Users commend the **easy integrations** of Burp Suite, enhancing their workflow with seamless browser and emulator support. (4 reviews) - Integration Capabilities (4 reviews) - Users highlight the **efficient vulnerability identification** capabilities of Burp Suite, appreciating its extensive testing features and ease of use. (4 reviews) - Users value the **tool efficiency** of Burp Suite, streamlining both automated and manual security testing processes. (3 reviews) - Users value the **automated scanning** features of Burp Suite, significantly reducing their workload during testing processes. (2 reviews) **What users dislike:** - Users criticize Burp Suite for its **high cost** and limited accessibility for students and beginners. (5 reviews) - Users face **slow performance** issues, especially on low-spec devices, leading to occasional hangs and frustrating experiences. (5 reviews) - Users find the **high learning curve** of Burp Suite challenging, particularly in grasping its proxy setup and workflow. (2 reviews) - Users struggle with a **steep learning curve** in Burp Suite, particularly regarding the proxy setup and tool usage. (2 reviews) - Users find **limited customization** in Burp Suite restricts exploration for beginners, affecting their overall learning experience. (2 reviews) - Users are frustrated with the **poor interface design** of Burp Suite, calling for significant improvements to enhance usability. (2 reviews) - Users report **bugs and crashes** , particularly issues with HTTP2 traffic and connection errors, complicating usage. (1 reviews) - Complexity (1 reviews) - Complex Setup (1 reviews) - Difficult Learning (1 reviews) ## Burp Suite Reviews ### 1. BurpSuite An Intelligent Proxy **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Management Consulting | Enterprise (> 1000 emp.) **Reviewed Date:** June 21, 2021 **What do you like best about Burp Suite?** Smart and Intelligent proxy Software for Application Security Testing. The best part about burpsuite is that it is available in community edition for free of cost on which one can use for testing in his/her lab and do handson prior using Enterprise or Professional edition. It is useful in detecting and exploiting multiple web based vulnerabilities and Web Application Security Assessment can also be carried out. **What do you dislike about Burp Suite?** You need to change the browser settings in the browser while configuring the burp suite in between the web search and internet so that the traffic flow via the burp suite proxy and some browsers are not compatible with it or have to allow traffic every time during the normal search. **Recommendations to others considering Burp Suite:** Best tool for Web Application Security Assessment, Vulnerability Management and Penetration Testing. **What problems is Burp Suite solving and how is that benefiting you?** I used to perform Vulnerability Assessment and Penetration Testing of web applications against multiple discovered and exploitable vulnerabilities. It is easy to use, complete solution for Web application Security to detect, namely SQL injection, XSS, XSRF related vulnerabilities. ### 2. Proxy tool **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Computer & Network Security | Enterprise (> 1000 emp.) **Reviewed Date:** November 05, 2021 **What do you like best about Burp Suite?** Intruder , intercept , extender , collaboratior **What do you dislike about Burp Suite?** Port forwarding , scanner , proxy certificate **Recommendations to others considering Burp Suite:** A great tool to start career **What problems is Burp Suite solving and how is that benefiting you?** Application security , api Security , android Security ### 3. Best Tool for Manual Security Testing **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Computer & Network Security | Small-Business (50 or fewer emp.) **Reviewed Date:** August 29, 2020 **What do you like best about Burp Suite?** This is one of those tools which never stops giving. Burp itself is an incredible tool for intercepting and playing around with application requests, it also keeps on getting better with its extensions. Provides me an extremely simple way to analyze and proxy the application traffic for security testing of web and mobile apps. **What do you dislike about Burp Suite?** To be honest, this is a great tool for its price. I prefer this over any other tool. This is like the go-to tool for my penetration testing arsenal. **Recommendations to others considering Burp Suite:** If you need a proxying tool for any sort of testing, this is one of the best tools and after the addition of websockets interception, this has become much better compared to OWASP ZAP and Charles Proxy. This is the best choice among those 3 **What problems is Burp Suite solving and how is that benefiting you?** I use it generally for security/ penetration testing of mobile and web applications. The best and most useful feature of it is the ability to proxy all the HTTP/HTTPS traffic of an application, which allows a tester to modify and send all sorts of data to the application backend. Thus, making it east to perform security testing. ### 4. Best security tool I ever used which provides DAST, IAST and lot good features. **Rating:** 5.0/5.0 stars **Reviewed by:** Venkatesh P. | Cyber Security -Technical Specialist, Enterprise (> 1000 emp.) **Reviewed Date:** July 23, 2020 **What do you like best about Burp Suite?** 1. Repeater and Intruder are most powerful feature of Burpsuite which will give user the extra hand to perform testing of various attacks. 2. Request intercept is also another feature where you can change parameter while testing it and check the expected result 3. Extender will give you plugins to perform more advance security testing ways 4. Sequencer is a good feature which will help for the professional to check the tokens whether it is producing random or sequential order of tokens. **What do you dislike about Burp Suite?** Sometime it used to get crash but after a long time like 2-3 week. It may be because of buffer overflow. Other than this there is no problem I found in this tool. **Recommendations to others considering Burp Suite:** Using burpsuite is very useful for fresher as well as experienced person. As it is very simple to configure. You just need to setup the proxy with 8080 port which is pretty much straight forward. As this tool will enhance the capability of user try more security testcases as compare to another tools. And this is user friendly and you will get full support from the Burpsuite team for any problems **What problems is Burp Suite solving and how is that benefiting you?** Security Testing, Vulnerability Assessment, Penetration Testing and Freelancing of Security projects As a professional user I will recommend this for every cyber security user to use it. I earned lot of appreciation using burpsuite as in initial stage of my career I earned 20K INR as performance bonus just because of burpsuite which helped me to present the findings to the Management team. ### 5. Burp Suite Professional is a complete product with great features **Rating:** 5.0/5.0 stars **Reviewed by:** Nilupul S. | Senior Software Engineer, Small-Business (50 or fewer emp.) **Reviewed Date:** May 06, 2020 **What do you like best about Burp Suite?** Burp Suite Professional is a complete product with great features. Easy to use and straightforward. It covers most generic vulnerabilities also. Web application crawler features very helpfully when we want to map a web site. It has many pre-configured settings also. The reporting feature is great and can be exported into HTML as well. It indicates the severity of the identified issues for better readability. Burp Suite Professional also intercept the traffic and allow us to interact between application requests and responses. Manual and automated testing can be performed. **What do you dislike about Burp Suite?** The only negative thing is the cost is very high per user. **What problems is Burp Suite solving and how is that benefiting you?** Burp Suite is a very useful software for web application penetration testing. It can act as a proxy and intercept the traffic. It also acts as a vulnerability scanner. We are using Burp Suite for testing web apps security which we are developing. During my usage, Burp Suite provided accurate results most of the time. And it is easy to use software also. It is a complete set of tools to conduct the most advanced security testing. ### 6. Ideal Tool for web application security Tests **Rating:** 4.5/5.0 stars **Reviewed by:** Anjalee A. | Assistant Manager Cyber Security, Enterprise (> 1000 emp.) **Reviewed Date:** March 19, 2020 **What do you like best about Burp Suite?** According to My personal experience, this has various features which I like most some of the features are This software can be used as a man in the middle tool for intercept the traffic and able to listen to the communication between the server and the client and modify the traffic using this tool and perform a different kind of security testing activities such as SQL injection tests, Cross-site scripting tests, brute force attacks and the web vulnerability findings as well this tool can be used to intercept the mobile application traffic and the same web application vulnerability tests can be performed on the mobile applications and able to find the vulnerabilities in the mobile applications as well and although burp suite professional version has integrated automated vulnerability scanner as well so that this tool can automatically scan the web application and give the findings related to vulnerabilities in particular web applications. **What do you dislike about Burp Suite?** Reports generated from this tool must be improved and need to be more colourful and include more graphics to its reports. **Recommendations to others considering Burp Suite:** This tool was written in java and it is easy to deploy it has an installable version and download and run version in download and run version only needed java and if java is installed on the machine it's quite enough **What problems is Burp Suite solving and how is that benefiting you?** My connection with Burpsuite professional was a long time back and iuieor er ew eerrwwer ewrew w ### 7. Burpsuite is a very useful tool for Penetration testing **Rating:** 5.0/5.0 stars **Reviewed by:** Thivaharan R. | Mid-Market (51-1000 emp.) **Reviewed Date:** July 16, 2020 **What do you like best about Burp Suite?** BurpSuite is very useful tool while conducting Web application security testing. This tool is very easy to setup on any environment. This tool also has a very interactive interface which makes it very easy to use and master. This tool also has some very useful plugins which allow us to perform various tasks such as intercept the traffic between a target which makes this also an ideal solution to conduct man-in-the-middle attacks. **What do you dislike about Burp Suite?** There is nothing bad to say about this tool **Recommendations to others considering Burp Suite:** I would recommend Burpsuite for anyone who is conducting penetrations test as it will be very useful. **What problems is Burp Suite solving and how is that benefiting you?** BurpSuite allows us to easily perform various security testing processes such as Man-in-the middle attack without having to switch between various tools. ### 8. Best Weapon like Tool for Pen-tester, developer, testers. **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Computer & Network Security | Enterprise (> 1000 emp.) **Reviewed Date:** June 22, 2019 **What do you like best about Burp Suite?** Burp has best extensions Available in market I use burp frequently. The developer around the world can create extension and integrate in Burp. Burp with CI/CD pipe integration plays a vital role. Burp suite Works best with Burp collaborator ad on so out of band channel attacks can be performed. Actually a pentester can learn coding language by see the response of the URL. Friendly and easily to understand. **What do you dislike about Burp Suite?** Burp should handle a Lakh requests at once, so the system shouldn't be struck while pen testing. V2020 is the worst update i have seen till now. older version is much better than new one. V2020 has auto spidering and auditing which makes a pen tester think, "is the spidering actually going on or its just false positive. **Recommendations to others considering Burp Suite:** I would suggest this tool to newbies, developer who have just landed in development or security research. **What problems is Burp Suite solving and how is that benefiting you?** Problems solving with Burp as follows, 1. Benefit+Healthcare support FHIR APIs. 2. ad on like Active++, Logger++, Software Vulnerability scanner,Burp collaborator have been awesome support for pen-tester to find the hidden vulnerabilities. 3.Thick Client Pen testing played an important role in Burp to solve many backend related links requesting and intercepting it. 4.While testing for Web socket hijacking, It was easier to see the client and server requests, as burp has different TAB for that . ### 9. Helps us to build web applications with better security. **Rating:** 4.5/5.0 stars **Reviewed by:** Sanjaya L. | Senior Software Engineer, Small-Business (50 or fewer emp.) **Reviewed Date:** April 15, 2020 **What do you like best about Burp Suite?** Burp Suite is a complete set of tools for conducting vulnerability tests. Manual and automated tests can be configured easily. Web sites can be mapped using the spider feature. It also acts as a web proxy and allows us to intercept web traffic. So, it is very easy for us to find vulnerabilities. Also, Custom rules can be made. **What do you dislike about Burp Suite?** The interface needs to be improved. very few times it could give false results. **What problems is Burp Suite solving and how is that benefiting you?** Burp Suite is a crucial tool in the information security field. We are using Burp Suite to test web applications for vulnerabilities. This is easy to use the tool and provides accurate results most of the times. This tool helps us to build applications with better security. ### 10. Best interception Tool **Rating:** 5.0/5.0 stars **Reviewed by:** INZAMAM N. | Small-Business (50 or fewer emp.) **Reviewed Date:** July 15, 2020 **What do you like best about Burp Suite?** Burp Suite is a manual security check that acts as a proxy for all vulnerabilities. You need to configure it so that communication between your client and web server is intercepted. The Burp Suite interface is a great choice for technical experts, especially penetration testers. **What do you dislike about Burp Suite?** personally i didn't find any downsides for this tool but just basic setup is quite complicated. **What problems is Burp Suite solving and how is that benefiting you?** You can find the vulnerabilities easily of targeted network or website.It has very nice features like interceptor,spider crawling and lots more. ### 11. Must have Testing tool **Rating:** 4.5/5.0 stars **Reviewed by:** Pragyanjali S. | Cyber Security Analyst, Enterprise (> 1000 emp.) **Reviewed Date:** March 20, 2020 **What do you like best about Burp Suite?** Bust suite is reach testing tool which provides wide range of functionalities for different kind of applications. Most importantly for web application it can do full scan and provides vulnerability report. It also provides plenty of extenders to improve it's working and effciency . Apart from giving the list of vulnerabilities it also shows ways to patch those issues. **What do you dislike about Burp Suite?** Sometimes it shows false positive findings. In community version it doesn't have much options to use. **Recommendations to others considering Burp Suite:** It great tool for automated scan. If you are looking for any tool for web application go for it. **What problems is Burp Suite solving and how is that benefiting you?** We can use burpsuite with every type of application. Most preferably I am using burp suite for web application. ### 12. A Must-Have Penetration Testing Tool For Any Security Tester **Rating:** 5.0/5.0 stars **Reviewed by:** Keshani B. | Intern, Enterprise (> 1000 emp.) **Reviewed Date:** December 09, 2019 **What do you like best about Burp Suite?** Its wide section of features and functions. Mainly, its ability to scan for vulnerabilities and the ability to intercept and modify packets. You can perform vulnerability assessment and penetration testing for a web application by intercepting the network packets and changing its content. This changing can be either manually done, like modifying the packets to achieve a specific objective with an outcome in mind, or can be done automatically , like brute forcing the login credentials of a web application by feeding the username and password parameters from a wordlist. Security testing can be further extended using its scanning function. You can automate a thorough scanning process to carry out on the entire website and get a comprehensive description on the vulnerabilities it finds. **What do you dislike about Burp Suite?** In overall, this is a good product which has minor improvements in order. BurpSuite has a set of complicated interfaces which throws the focus of the user. Productivity can be increased if the user interfaces are designed accordingly. Another thing I dislike about it is its number of false positives generated. As with any other vulnerability scanner, BurpSuite also generates a number of false positives and the user must take the responsibility to manually check and verify the vulnerabilities BurpSuite identifies. Moreover, even though a thorough description is given about the vulnerability it finds on a particular web application, with additional reference link etc., still its overall reporting can be significantly improved. **Recommendations to others considering Burp Suite:** If you are a penetration tester or just a developer wanting to know the security level of your web application, BurpSuite is the tool for you. Main point for a new user is whether the product has enough technical support. To that end, BurpSuite is more than satisfying. It has an enormous online user community which is more than capable to guide you in any sort of problematic situation. As far as the price goes, community edition in itself provides a lot features that an individual security researcher may find more than enough, but to conduct VAPT as a business, you may need to either purchase the professional edition or the enterprise edition. But with the additional features the professional edition provides, 399 USD will soon prove to be worth every single penny. **What problems is Burp Suite solving and how is that benefiting you?** For a while, we were looking for a good application that can be used to intercept the packets sent to a web application and modify them without any restrictions imposed. And it was our requirement that certain tasks, such as brute forcing credentials, be automated hence eliminating the need for around the clock manual modifications. To this end, BurpSuite exceeded expectations. We first tried with the free community version and we found out how much we were missing with the automated and thorough vulnerability scanning and etc. After testing with the community edition and learning it, we moved on to the professional version which soon proved to be every penny worth it. ### 13. Top Notch Vulnerability Scanning and Penetration Testing Tool **Rating:** 5.0/5.0 stars **Reviewed by:** Isuru S. | Intern, Enterprise (> 1000 emp.) **Reviewed Date:** December 05, 2019 **What do you like best about Burp Suite?** Its wide array of features is the best thing to like about it. Mainly, the scanning options. When given a target, Burp Suite will scanning for all possible vulnerabilities regarding to the target. Furthermore, it holds a powerful feature where we can manipulate the request being sent to the target manually or automatically. Lets say that you want to brute force login of an application. You just need to select the locations in the request (username field and the password field), then give relevant wordlists and start attacking. It automates the process you just have to kick back and relax while it does what is required. **What do you dislike about Burp Suite?** It generates quite a number of false positives. This is anyway true with any VAPT tool. After it identifies an issue, we did manual confirmation to see whether the identified vulnerability really exists. This is not so much as disliking but something mandatory for all similar types of tools. **Recommendations to others considering Burp Suite:** If you are a professional in VAPT category, and if you still not using this, believe me, this is a must have tool in an penetration testers arsenal. As far as the price go, if you want to go with the professional edition, it costs around 399 USD per year and Enterprise editions costs around 3999 USD. But you can still achieve same level of intensity by even using the community version if you know what other software to employ and how. **What problems is Burp Suite solving and how is that benefiting you?** We wanted a robust tool with the capability to automate most of the tasks. After some researching we found out about Burp Suite. It is so much easy to use and automates most of the processes needed for us. Its strong user community is always helpful when it comes to any problem regarding the software. ### 14. All in one tool for web and mobile application security testing **Rating:** 4.5/5.0 stars **Reviewed by:** Gihan J. | Penetration Tester, Enterprise (> 1000 emp.) **Reviewed Date:** November 27, 2019 **What do you like best about Burp Suite?** As a penetration tester, I have to deal with a vast range of security testing tools. BurpSuite is by far the most favorite security testing tool among them. The reason for that is, I was able to capture some severe vulnerabilities by using a burp scanner while the dedicated scanners were failed to do so. Also, It's easy to intercept the traffic, manipulate the parameters and send the same request repetitively. Testing for SQL injection and XSS (cross-site scripting ) can't be easier because the user only needs to indicate where to test and to select the malicious list to be used. External plugins, extensions can be integrated easily into a burp environment which increases the effectiveness of burp. Specializing all these functionalities of Burpsuite will drastically enhance the skills of a penetration tester. **What do you dislike about Burp Suite?** Burp can be sometimes troublesome to beginners because of it's messy interface and advanced functionalities. Also the cost is unbearable for a normal person. To test different vulnerabilities tester should have an advanced knowledge about the procedures to follow and learning about these will waste a lot of time. **Recommendations to others considering Burp Suite:** Before using BurpSuite, it is recommended to follow tutorials,videos to get familiar with burp interface and functions because the beginners will find it difficult to conduct security testing. **What problems is Burp Suite solving and how is that benefiting you?** Using BurpSuite to find Web and mobile application security vulnerabilities of client companies.Burp contains a lot of functionalities as a single package which can be the ultimate relief of a penetration tester.Without a compact tool like BurpSuite, testers need to run numerous tools to get the same functionalities. ### 15. Top-notch Vulnerability Scanning Tool for Penetration Testers **Rating:** 5.0/5.0 stars **Reviewed by:** Isuru S. | Security Consultant, Enterprise (> 1000 emp.) **Reviewed Date:** December 02, 2019 **What do you like best about Burp Suite?** Platform, features and price range - all are plus points for the product when considering its use in the information security field. Burp Suites wide array of features and services include the ability to scan web applications passively and actively to identify a variety of vulnerabilities such as SQL injection, Cross-Site Scripting and etc. Not only that its ability to give the user full capability on attack vectors and web application parameters against the target coupled with the different services and features available for check against specific vulnerabilities such as HeartBleed is a huge benchmark that is set against all other similar products in existence. **What do you dislike about Burp Suite?** Overall, its only problem I can see is the number of false positives it generate. Although in any vulnerability scanner, the user must manually check if the vulnerability actually exists, still, If Burp Suite can reduce the false positives much more significantly, without the interaction of the user or via further limiting the scope, it would add a lot of additional value to an already top-notch scanner. **Recommendations to others considering Burp Suite:** If your company is looking at conducting VAPT either against your own products and systems or else on clients in an service provider relationship, I would highly recommend you to purchase and implement Burp Suite Professional (Even the free version provides significant number of functionalities). I assure you that you will soon find out why this is considered as a deity among vulnerability scanning software. The price is so much lower considering its massive amount of features and functions paired with the robustness of it all. **What problems is Burp Suite solving and how is that benefiting you?** Burpsuite has help our department to the furthest possible limit. It is an everyday tool in use when we conduct VAPT for our clients and even with false positives, it has managed, constantly and unfailingly, to provide best findings all most all the time as expected. ### 16. Efficient tool for assessment and pentesting applications for vulnerabilities **Rating:** 4.5/5.0 stars **Reviewed by:** Laxmi S. | Senior Software Engineering, Information Technology and Services, Enterprise (> 1000 emp.) **Reviewed Date:** November 14, 2019 **What do you like best about Burp Suite?** Burpsuite is very useful application for testing of applications developments and securing the network by reporting vulnerabilities, the application features like repeater, intruder, intercepting are very intuitive for penetration testing of the web and mobile applications, the manual and also automated scans are very reliable for the proper findings and testing of applications. **What do you dislike about Burp Suite?** The tool is very effective for securing the application and network environment of the organization by proper use and trained efforts, the improper use may affect the application database which or on production stage, only manual tests could be performed safely or initial configurations need to be made for automated scans. **Recommendations to others considering Burp Suite:** The tool is very effective in securing the applications developed by automatic scans as well as manual testing, also the reporting of vulnerabilities is very easier and support is good, overall the integrity and confidentiality of the organisation improves with this tool. **What problems is Burp Suite solving and how is that benefiting you?** With use of Burpsuite application our VAPT team use to find out the application flaws and vulnerabilities to secure the client trust and usage for safer applicability, also the reporting of the so found vulnerability by the tool is quite descriptive and reliable. ### 17. burp is a pen tester hand book **Rating:** 5.0/5.0 stars **Reviewed by:** ranjith p. | assistant lecture , Mid-Market (51-1000 emp.) **Reviewed Date:** August 13, 2019 **What do you like best about Burp Suite?** it is an important tool for everyone who is cyber security field. especially for the penetration tester and bug bounty hunters. because it covers all initial needs for a security professional. also, it complies with third-party plugins to do an additional task which is not included with a burp. so we can easily customize the burp based on our needs. **What do you dislike about Burp Suite?** I never ever seen any negative stuff on the burp suite. but I feel it's pricing is a little bit high. other than that I'm really happy with burp suite. **Recommendations to others considering Burp Suite:** all cybersecurity professionals should be used burp suite. it is a simply awesome tool for the penetration tester. I can blindly recommend this to others **What problems is Burp Suite solving and how is that benefiting you?** for my research purpose, I had to analyze web application request and repose data packets. for that burp was done the great help to me. because it has everything with self to analyze web application data packets. especially I'm crazy with repeater and compare those feature are simply awesome. and one more thing it not only for the web application. it can work perfectly on android, ios and windows application too. ### 18. Powerful Web App Penetration software **Rating:** 5.0/5.0 stars **Reviewed by:** Arul V. | Software Engineer, Mid-Market (51-1000 emp.) **Reviewed Date:** October 04, 2019 **What do you like best about Burp Suite?** BurpSuite is Powerful Web Application and mobile application Penetration software, which is very powerful, Burpsuite having powerful scanning ability, also provides very detailed report. perfect software for pen-testers. easily we can identify the web, mobile application vulnerabilities. very light software. installation wont take much time, very user friendly tool,Work with windows and Linux OS. Very essential tool for security checking. **What do you dislike about Burp Suite?** Nothing to dislike, we are happy with Burp suite **Recommendations to others considering Burp Suite:** I like to recommend this **What problems is Burp Suite solving and how is that benefiting you?** More than two years we are using Burpsuite, very user friendly software. helps to find the mobile app, web app vulnerabilities easily, quick scan and detailed report burp-suite providing. realizable pen-testing tool. Burp-suite is fully packed with great security functionality. easy to learn and use, not much complex software. ### 19. BurpSuite is a Must-Have for Security Engineers **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Financial Services | Enterprise (> 1000 emp.) **Reviewed Date:** March 27, 2020 **What do you like best about Burp Suite?** Burpsuite is a must-have tool for manual penetration testing. There is so much you can do with Burpsuite, it's really limitless. There are also many extensions that you can download and use with Burpsuite. **What do you dislike about Burp Suite?** I've used this for a year and have not come across any dislikes. The only thing is that it does take a while to learn and get used to using. **Recommendations to others considering Burp Suite:** If you are unsure whether or not to use Burpsuite, my advice is to pull the trigger. It's a great tool that can be leveraged for many use-cases. **What problems is Burp Suite solving and how is that benefiting you?** - Manual web application testing -manual penetration testing With Burpsuite Pro we have gained a more secure platform. ### 20. Vulnerabilities scanning and reporting for information security of applications **Rating:** 4.5/5.0 stars **Reviewed by:** Madhu R. | Software Quality Assurance Analyst, Information Technology and Services, Mid-Market (51-1000 emp.) **Reviewed Date:** October 03, 2019 **What do you like best about Burp Suite?** Burpsuite is very powerful tool for vulnerability assessment of webapplication and also for mobile application, the auto scanning options is easy to configure with proxy connection and start using for manual testing of the application developed, helps a lot for developers to secure the application with respect to information security based on OWASP. **What do you dislike about Burp Suite?** The scanning option eases the manual work of testing but also shows false positive results sometimes, this has to be carefully looked after for actual existence of the vulnerabilities. Other than that the tool options and features are very useful. **Recommendations to others considering Burp Suite:** Its a great tool for securing web and mobile application according to OWASP guidelines, easy to setup and use and reports and recommendation are very helpful. **What problems is Burp Suite solving and how is that benefiting you?** Burpsuite professional application is helpful in securing application free of Vulnerabilities, with this tool our team use to test the newly developed web and mobile applications by performing active scan as well as manual exploiting upon the same, the results are fruitful in securing according to OWASP guidelines. ### 21. One of the best pentesting tool for web and mobile applications **Rating:** 4.5/5.0 stars **Reviewed by:** Saumya G. | Network Security Engineer, Computer & Network Security, Mid-Market (51-1000 emp.) **Reviewed Date:** September 26, 2019 **What do you like best about Burp Suite?** The testing of application for vulnerabilities whether it be static or dynamic, mobile or web based is quite revealing with active scans and results of the test are very helpful for securing the application with respect to OWASP security guidelines. The features are cool like using repeater to repeat modified request, intruder to perform bruteforcing and different attacks. **What do you dislike about Burp Suite?** The application guidance is not so popular, anyone who has the understanding of internet and telecommunication can learn to exploit the web applications and/ cause harm to individual users. The tool is easy to setup and start testing for vulnerabilities. **Recommendations to others considering Burp Suite:** The application assessment is very much feasible with a vulnerability scanner tool, and burpsuite is one of the best for assessment job. **What problems is Burp Suite solving and how is that benefiting you?** Burpsuite helped a lot for us during application assessment performing VAPT, the use of the fetures was great experience and the application scan results were too helpful for the real-time tests and assessment with the reports. ### 22. The tests are good, easy to install. **Rating:** 5.0/5.0 stars **Reviewed by:** Dominick O. | Senior Engineer, Mechanical Design, Enterprise (> 1000 emp.) **Reviewed Date:** November 20, 2019 **What do you like best about Burp Suite?** Firesfox works best and allows other plug-ins to provide feedback for testing various security checks. When done, the scan offers an effective vulnerability-resolution file which is very useful for developers to fix bugs in the best possible way. **What do you dislike about Burp Suite?** The time taken to search the websites varies according to the website data, and the process is further slowed down by multiple sites. **Recommendations to others considering Burp Suite:** Easy implementation software. It does its job to implement it with confidence. **What problems is Burp Suite solving and how is that benefiting you?** Burpsuite leads Penetration Testing Platform to manual and browser-based automation testing, best works on Firefox and supports several plugins that provide input to test for a variety of security checks, and after scanning, generates an active vulnerability solution document which is extremely helpful to developers in mitigation of bugs. ### 23. BurpSuite Used For Security Testing! **Rating:** 4.5/5.0 stars **Reviewed by:** Pranav P. | Mid-Market (51-1000 emp.) **Reviewed Date:** November 27, 2019 **What do you like best about Burp Suite?** It is a best tool to find vunerabilities and cross -siting and it is very simple and easy to use and it has good user interface and it is supported in diffrent languages. **What do you dislike about Burp Suite?** The cost is expensive and it is very difficulty to understand the new features . **Recommendations to others considering Burp Suite:** BurpSuite is the best tool for security testing and it has lot of features which are not available in other same type tools . They also has a free plan , use it before getting a paid plan. **What problems is Burp Suite solving and how is that benefiting you?** I'm a network security engineer where we used this to find the bugs in our websites and portals and fixing them. this is one of the best tool for security testing . ### 24. Vulnerability Assessment and penetration testing for web and mobile application **Rating:** 5.0/5.0 stars **Reviewed by:** Manasi P. | Senior Software Analyst, Information Technology and Services, Enterprise (> 1000 emp.) **Reviewed Date:** September 18, 2019 **What do you like best about Burp Suite?** Burpsuite is very powerful application for finding Vulnerabilities and loopholes exploiting in a given web or mobile application, its supports both dynamic and static testing for applications, the features like intruder and repeater are helpful for manual testing and active scan feature can be used with default entries for automated testing of application. The results of the scans are very helpful for secure development strategies. **What do you dislike about Burp Suite?** The application some times throws false positive results or the vulnerabilities exist but are not actually exploitable for the application due to some other configuration done or mitigated already. Other than that the results are very accurate. **Recommendations to others considering Burp Suite:** The application is very powerful in finding the gaps and misconfiguration made in application setup, the active scan with credentials setup results give many clarity in the existing Vulnerabilities in the application. **What problems is Burp Suite solving and how is that benefiting you?** With burpsuite we use to scan automate for the internal applications developed within our organization, also for mobile application testing this tool was very reliable in data analysis and dyanmic testing through ssl pining. ### 25. Best platform for finding the loop holes in the web applications. **Rating:** 4.5/5.0 stars **Reviewed by:** Touseef H. | VAPT Engineer , Small-Business (50 or fewer emp.) **Reviewed Date:** December 04, 2019 **What do you like best about Burp Suite?** I like this tool because of the performance and the functionality which is high and awesome where this is used to find the loop holes in the web applications where we can check for the request and response. **What do you dislike about Burp Suite?** Till now I did not found any dislike but one this game it’s a very nice tool. **Recommendations to others considering Burp Suite:** I recommend to use this tool for finding the vulnerabilities in the web applications without any extra knowledge. **What problems is Burp Suite solving and how is that benefiting you?** All the problems are solved using this tool where we can intercept with the browser and check for the request and response also we can insert payloads in the request to find the vulnerabilities in the web applications. ### 26. Number one Web application proxy for security testings. **Rating:** 4.5/5.0 stars **Reviewed by:** Ronald S. | Senior Software Engineer, Mid-Market (51-1000 emp.) **Reviewed Date:** August 06, 2019 **What do you like best about Burp Suite?** Burpsuite is one of the most essential web application proxy tool that can used for test web and mobile applications it is so easy to configure the Burpsuite with web browser by configuring it to localhost address 127.0.0.1 and we can run the web application scans and perform man in the middle application security testings by capturing the packet information and edit the packet and submit it to test the Vulnerabilities of the web application. **What do you dislike about Burp Suite?** User interface looks so old looking and i think it should be improve by the Burpsuite team. **Recommendations to others considering Burp Suite:** this product is best for professional security testers and security consultants it comes with professional version and the free version, free version can be used for students. **What problems is Burp Suite solving and how is that benefiting you?** We are using Burpsuite to test the vulnerabilities in web and mobile applications. ### 27. Great Vulnerability assessment application for Web and Mobile application based on OWASP **Rating:** 5.0/5.0 stars **Reviewed by:** Vidya B. | Cyber Security Analyst, Information Technology and Services, Mid-Market (51-1000 emp.) **Reviewed Date:** September 12, 2019 **What do you like best about Burp Suite?** The application can be used to report and find almost all the vulnerabilities that may be present in a given web application, the scans and procedure for intercepting from browsers traffic is very easy and gives quick results depending on application static and dynamic pages, also simultaneous scanning as we browse through the application can be done. **What do you dislike about Burp Suite?** There are many features like repeater, intruder, scanner with burpsuite professional that are quite useful, the only thing is many a times some of the results are false positive and need to be reconfirmed for major issues. **Recommendations to others considering Burp Suite:** Burpsuite is a brilliant application for easy intercepting of browser and mobile application traffic and scanning for vulnerabilities with automation and also manually performing penetration testing in accordance with OWASP guidelines. The results of automated scans sometimes produce false positive vulnerabilities so users need to manually test for the results, overall the use of Burpsuite is beneficial for organisation. **What problems is Burp Suite solving and how is that benefiting you?** With burpsuite application our security consulting team use to perform vulnerability assessment and penetration testing for the web applications as well as mobile applications developed by developer team, the results from the application were quite useful for improving information security onto the systems in accordance to OWASP guidelines ### 28. Great automated vulnerability scanner with Java for Web applications **Rating:** 4.5/5.0 stars **Reviewed by:** Gauri B. | Lead Software Engineer, Mid-Market (51-1000 emp.) **Reviewed Date:** August 28, 2019 **What do you like best about Burp Suite?** The tool lists so many vulnerabilities crawling the whole web application through browser proxy and lists the vulnerabilities with details and according to OWASP top guidelines. There are some critical vulnerabilities found with automatic browsing scans, also lot many features like changing the requests, headers, intrude etc that are intriguing. **What do you dislike about Burp Suite?** The tool is awesome for vulnerability scanning and knowing the flaws in the web applications developed, it would be great if the tool could scan the systems or servers hosting them, the tool although lists the vulnerabilities associated with server flaws like dos attacks, but still, other than that its a great tool for web-applications. **Recommendations to others considering Burp Suite:** Burpsuite is a must application nowadays for security testing of the web applications developed, if there are any security flaws in the application they would be definitely detected by this professional tool. **What problems is Burp Suite solving and how is that benefiting you?** Our teams of developers work on web-applications development and each time there is a new build, the application goes for its testing so there we make use of burpsuite for finding issues and vulnerabilities in accordance with OWASP guidelines. ### 29. One of the best tool for penetration testing **Rating:** 4.5/5.0 stars **Reviewed by:** Tousif N K. | VAPT ENGINEER, Small-Business (50 or fewer emp.) **Reviewed Date:** December 06, 2019 **What do you like best about Burp Suite?** This tool helps in crawling all the webpages does active and passive scan of websites give accurate results and show the exact location of the vulnerabilities **What do you dislike about Burp Suite?** As of now I have not come across any dislike **What problems is Burp Suite solving and how is that benefiting you?** By using burpsuite the exact location of vulnerability will be known and after active and passive scan it will show almost all the vulnerabilities making job of pentesting easy ### 30. Burp suite is perhaps the tool par excellence in terms of dynamic application security testing. With **Rating:** 5.0/5.0 stars **Reviewed by:** Vitaly C. | Cyber Security Consultant , Mid-Market (51-1000 emp.) **Reviewed Date:** September 20, 2019 **What do you like best about Burp Suite?** Burp Suite is one of the most useful tools in the cyber security domain for web application and mobile application testing. Penetration can easily test the applications using configurable proxy. Using that proxy pentester simply can Intercepts the data traffic. **What do you dislike about Burp Suite?** Nothing to say as dislike, we are happy with Burp Suite **What problems is Burp Suite solving and how is that benefiting you?** Burp suite is perhaps the tool par excellence in terms of dynamic application security testing. With several tabs in which you can perform many activities, I would highlight the possibility of adding extensions designed to complement the multiple options that the tool provides us. ### 31. The most useful Web Penetration testing tool **Rating:** 5.0/5.0 stars **Reviewed by:** Jacob C. | Senior Software Engineer Team Lead, Enterprise (> 1000 emp.) **Reviewed Date:** October 07, 2019 **What do you like best about Burp Suite?** Burp Suite is the most useful Web Penetration Testing vulnerability scanning framework. The most like feature is its reporting feature and it provides detailed results. Its user interface is quite simple and easy to use. There are features to cover the most common vulnerabilities as well as way to customize attacks. Possible to configure manual proxies. Also can schedule scans. The web application crawler feature helps us to map and navigate around the web application. Easy to deal with sessions and cookies. **What do you dislike about Burp Suite?** I do not find any major disadvantages of Burp Suite. **What problems is Burp Suite solving and how is that benefiting you?** We use Burp Suite for web application vulnerability scanning. It provides a variety of features to support our tasks. Also, I feel that it is very easy to work with Burp Suite. ### 32. One of the best VAPT Tool I used in my VAPT Career **Rating:** 4.0/5.0 stars **Reviewed by:** Ashen S. | Analyst, Mid-Market (51-1000 emp.) **Reviewed Date:** November 27, 2019 **What do you like best about Burp Suite?** Burp Suite is giving best crawling results and the configuration of the scans give us the best vulnerability assesments. **What do you dislike about Burp Suite?** Some times Burp Suite scans give us false positive results. **What problems is Burp Suite solving and how is that benefiting you?** I use burp suite to capture packets and those packets can use to find vulnerabilities of the web or servers. Also burp suite gives the scan reports to out configurations. ### 33. Best penetration tool ever **Rating:** 5.0/5.0 stars **Reviewed by:** Anjani S. | System Administrator, Mid-Market (51-1000 emp.) **Reviewed Date:** October 11, 2019 **What do you like best about Burp Suite?** Burpsuite is one of the best penetration tool, very user friendly software, and burp suite has powerful scanning capabilities, which helps to identify the website,mobile application loopholes and vulnerabilities easily. we can customize and do the scanning. Burp suite is very complete product. with burpsuite pentest method we can easily Intercepts the data traffic. **What do you dislike about Burp Suite?** Nothing much, interface could be improved as per latest trend **Recommendations to others considering Burp Suite:** I like to recommand this VAPT Tool **What problems is Burp Suite solving and how is that benefiting you?** We are using the Burpsuite to do the software security check, very reliable software. also burp-suite is light weight software ability to work with windows and linux also. according to me burpsuite is best and powerful web proxy tool, there is no alternative for burpsuite ### 34. Best web application proxy for web security testings **Rating:** 4.5/5.0 stars **Reviewed by:** Lavindra G. | Business Analyst, Mid-Market (51-1000 emp.) **Reviewed Date:** July 10, 2019 **What do you like best about Burp Suite?** Burp-suite is one of the best web application proxy tool that can be used for web application security testings it has scanning function for web application bug findings and parameter tampering functions for capture the packet and edit the packet and we can use these functions for many server side testings of a web application such as Cross site scripting and SQL injections. **What do you dislike about Burp Suite?** Burp suite automated scanner is not strong enough it sometimes give false positive as well. **Recommendations to others considering Burp Suite:** Best web application proxy it comes with free and professional versions, price is reasonable for anyone in professional version best tool for security testers for web application security testings. **What problems is Burp Suite solving and how is that benefiting you?** I Use Burpsuite for perform web application security testings and also used for run some automated scans. ### 35. Burpsuite is friend of Pentesters **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Computer Networking | Mid-Market (51-1000 emp.) **Reviewed Date:** August 01, 2019 **What do you like best about Burp Suite?** Burpsuite is friend of Pentesters, great software for pen testing work, easily we can find web application or mobile application vulnerabilities, burp suit has very powerful scanner, we can customize and scan the application. also burp suite is very light weight software, supports both Platforms. burp suite not giving false reports, very realizable software, also which is giving very detailed reports. overroll our experience with burp suite is good **What do you dislike about Burp Suite?** Nothing to dislike, we are happy with burpsuite, Interface colud be improved as per latest trent **Recommendations to others considering Burp Suite:** I Like to recommad **What problems is Burp Suite solving and how is that benefiting you?** Buprsuite hep to identify the mobile, web application security threats. reducing the work load very much, no need to run the several tools and get the report, burp suite can give all vulnerabilities in one deep scan. more than two years our QA team using Buprsuite, and we are happy with burp suite. no need large configuration computer, ability to work with small configuration pc ### 36. Top web secuirity testing tool **Rating:** 4.0/5.0 stars **Reviewed by:** Tejas G. | Associate Security Consultant, Computer & Network Security, Mid-Market (51-1000 emp.) **Reviewed Date:** September 30, 2019 **What do you like best about Burp Suite?** Burpsuite is actually pinnacle tool for web application security testing. It lets to perform manual testing of web and also mobile applications unlike many other security testing tools which are automated. It can let security researcher test the application as per their knowledge and find vulnerabilities. **What do you dislike about Burp Suite?** The thing I dislike about Burpsuite is it document have doesn't tell you how to test variety of vulnerabilities which is very difficult thing if someone is very new to this tool. **What problems is Burp Suite solving and how is that benefiting you?** It is easy to test even business logic vulnerabilities using Burpsuite. Though manually testing web application vulnerabilities takes time compared to automated tools but it the test results are accurate and number of false positives can also be less compared to them. ### 37. An efficient Man-in-the-Middle Attack Tool **Rating:** 4.5/5.0 stars **Reviewed by:** Aanu B. | Assistant Consultant, Small-Business (50 or fewer emp.) **Reviewed Date:** June 28, 2019 **What do you like best about Burp Suite?** - It offers a website scanner to use alongside the intercept tool that is able to detect common vulnerabilities like out-of-date-version of frameworks - When a request is intercepted, the queries are categorized and tabulated for easy examination **What do you dislike about Burp Suite?** - It does not work too well with Google Chrome because of the proxy method used. You would have to tunnel the whole system to intercept Chrome traffic **Recommendations to others considering Burp Suite:** While using the intercept function, it is easier to use browsers that can be tunneled separately from the system. One good example is Mozilla Firefox **What problems is Burp Suite solving and how is that benefiting you?** I used BurpSuite for penetration testing of web and mobile applications and it proved to be a very good tool. While not so complicated to understand, It offers a wide array of functionality ### 38. Scan the transmit packets of the web and mobile application **Rating:** 5.0/5.0 stars **Reviewed by:** Lola H. | Cyber Security Consultant , Mid-Market (51-1000 emp.) **Reviewed Date:** August 29, 2019 **What do you like best about Burp Suite?** BurpSuite is one of the most powerful tools for penetration testing Web Applications, Websites, Mobile Applications. Using BurpSuite, scan the target and replay the attacks as well. **What do you dislike about Burp Suite?** It is somewhat challenging to install the Burp's CA certificate. **Recommendations to others considering Burp Suite:** This is the best and most affordable pricing tool for packet scanning. **What problems is Burp Suite solving and how is that benefiting you?** We have been using BurpSuite for over 5 years in our company to test all web and mobile applications. We easily identify all the latest vulnerabilities, and it provides a comprehensive report for fixing the issues. ### 39. My best favourite tool in security **Rating:** 5.0/5.0 stars **Reviewed by:** Saravanan K. | Sankaran, Small-Business (50 or fewer emp.) **Reviewed Date:** August 07, 2019 **What do you like best about Burp Suite?** I am interested on founding vulnerability on websites, so I am using burp to find and dig the source code from web or app, burp suite has many features, intruder, conoarer, decrypter, repeater are some of them. Its always make to find and analyse the packet of each and every click, we can.using burpsuite to save our sites. I like the parameter part on packet loading window. **What do you dislike about Burp Suite?** Burpsuite always require additional knowledge to use. Its interface also little bit hard. **What problems is Burp Suite solving and how is that benefiting you?** Help to find any kind of bugs from websites, so we can secure our sites. ### 40. Pen testers' favorite tool **Rating:** 5.0/5.0 stars **Reviewed by:** Eliza S. | Senior Software engineer, Mid-Market (51-1000 emp.) **Reviewed Date:** September 03, 2019 **What do you like best about Burp Suite?** BurpSuite is best tools that we use for penetration both web and mobile application testing. BurpSuite ability to use job required fairly and quickly. It also produces a report that help for developers. **What do you dislike about Burp Suite?** Free versions have limited features for testing. **Recommendations to others considering Burp Suite:** Test the applications using deep packet analyzing. **What problems is Burp Suite solving and how is that benefiting you?** We are using BurpSuite for testing Mobile and Web applications including web sites. Using burp proxy it allows to scan the data packets, decrypt the data sets and replay the data packets as well. ### 41. Best pentest application for intercept the data packets **Rating:** 5.0/5.0 stars **Reviewed by:** Rosie Z. | Cyber Security Analyst, Mid-Market (51-1000 emp.) **Reviewed Date:** August 28, 2019 **What do you like best about Burp Suite?** BurpSuite is a best tool to capture and intercept the network traffic and analyze the traffic. Its ability to test websites, web applications and mobile applications. Burp suite offers many functionalities for manual and automated testing over the applications. **What do you dislike about Burp Suite?** Free versions limited for limited functions. **Recommendations to others considering Burp Suite:** Its ability to test the deep data packets and decrepit the data as well. **What problems is Burp Suite solving and how is that benefiting you?** We are using BurpSuite to test our in house developing including mobile and web applications, and for security tests. ### 42. Burp review **Rating:** 5.0/5.0 stars **Reviewed by:** Juan Rafael V. | Regional Information Security Officer, Small-Business (50 or fewer emp.) **Reviewed Date:** October 21, 2019 **What do you like best about Burp Suite?** BurpSuite's free version if more than sufficient for me and even after using this software for so long I still tend to learn new features in this software. However I strongly recommend to use the pro edition. **What do you dislike about Burp Suite?** Is very expensive as much of the features can be executed with a script selft developped. **What problems is Burp Suite solving and how is that benefiting you?** It provides thousands of features using which you can perform penetration test any web application and find out any possible flaw and fix it before any external hacker enters your organization's network via that flaw ### 43. Mainly use to test web application proxy **Rating:** 4.5/5.0 stars **Reviewed by:** Nipun S. | Consultant Cybersecurity, Enterprise (> 1000 emp.) **Reviewed Date:** April 02, 2019 ### 44. A must have pen-testing tool. **Rating:** 5.0/5.0 stars **Reviewed by:** Thilak W. | Senior Software Engineer, Mid-Market (51-1000 emp.) **Reviewed Date:** August 26, 2019 **What do you like best about Burp Suite?** One of the most using applications for web application pen-testing. It allows us to exploit security vulnerabilities. Mainly use for web vulnerability scanning. We can conduct automated scans as well as manual scans. Also allows us to configure own proxy server. Scheduling scans can be done. Another important thing is when scans finish it provides a details description and a report about issues. It categorizes issues in its priority like h, medium, low, etc **What do you dislike about Burp Suite?** Nothing to say bad about this software. I have never faced any problem with BurpSuite. **What problems is Burp Suite solving and how is that benefiting you?** Our team mostly doing pen-testing and we use BurpSuite for web application pen-testing. It allows us to find and exploit existing security vulnerabilities ### 45. "Exceptional Penetration Testing Tool" **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Electrical/Electronic Manufacturing | Enterprise (> 1000 emp.) **Reviewed Date:** July 04, 2019 **What do you like best about Burp Suite?** Burp Suit is one of the exceptional tool for Pen testing. Burp suit can be used for Web, Mobile and Network Pen testing. Its gives the accurate scan results after scanning and its provide the automated reports. In Burp suit we can do the both type of testing like automated and Manual. Its having bunch of plugins to add. Its having its own Store for adding add-ons. **What do you dislike about Burp Suite?** Burp Suit professional they will release weekly updates that will be interrupt in our daily work. it should be give updates on monthly based. not a weekly. **Recommendations to others considering Burp Suite:** I suggest the burp suit development team they should release the updates monthly. **What problems is Burp Suite solving and how is that benefiting you?** Burp suit is more benefits for me in my pen test work its provide the accurate scan results that will help us for doing manual testing easily. ### 46. Review on BurpSuite Tool. **Rating:** 4.5/5.0 stars **Reviewed by:** Lathosh R. | Network Engineer, Enterprise (> 1000 emp.) **Reviewed Date:** November 08, 2019 **What do you like best about Burp Suite?** BurpSuite enables us to infiltrate the applications even exploit mismatches in security chains. So it enables one can manipulate the interrupted traffic attribute fields to detect certain vulnerabilities inside the applications. **What do you dislike about Burp Suite?** Would not describe how and when to test various vulnerabilities that might be difficult whether you are a new member for this application. **What problems is Burp Suite solving and how is that benefiting you?** I have used BurpSuite tool to analyze the loopholes in the web application ### 47. Great for testing **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Computer Software | Enterprise (> 1000 emp.) **Reviewed Date:** March 26, 2020 **What do you like best about Burp Suite?** Intercepting and modifying requests for testing. **What do you dislike about Burp Suite?** Nothing really I find it very fit for purpose. **What problems is Burp Suite solving and how is that benefiting you?** I use it for end to end monitoring of requests when troubleshooting. It speeds up my workflow. ### 48. Best web application proxy for information scurity **Rating:** 3.5/5.0 stars **Reviewed by:** Mohit N. | Mohit, Small-Business (50 or fewer emp.) **Reviewed Date:** August 16, 2019 **What do you like best about Burp Suite?** Burpsuite is best vulnerability scanning tool, repeater and intruder are my favorite tabs, we can modify the browser intercepted traffic requests. we can perform brute-forcing attacks using burp suite **What do you dislike about Burp Suite?** The automatic scan results are some times getting false positive so we have to manually. **What problems is Burp Suite solving and how is that benefiting you?** Help to find any kind of bugs from websites, so we can secure our sites and earn reward from bug bounty ### 49. An Ethical hacker's tool **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Computer & Network Security | Enterprise (> 1000 emp.) **Reviewed Date:** June 17, 2019 **What do you like best about Burp Suite?** Burp suite is one of the best tool used for web application security testing. It has all the best request and response Technics to check the flaws in web apps . It has best intrusion feature **What do you dislike about Burp Suite?** It takes long time to scan. In results there will be false positive Vulnerabilities. Many extension are needs to be downloaded separately. **Recommendations to others considering Burp Suite:** Best request and response tool used for Penetration testing. Tool used for web application and Penetration testing **What problems is Burp Suite solving and how is that benefiting you?** Web application security flaws, best tool for Penetration testing. To the check hidden flaws for webs application ### 50. Swiss army knife for a security pro **Rating:** 5.0/5.0 stars **Reviewed by:** Philip C. | Security Engineer, Mid-Market (51-1000 emp.) **Reviewed Date:** September 29, 2019 **What do you like best about Burp Suite?** Ability to intercept the traffic with ease and fun. **What do you dislike about Burp Suite?** UI could've been better but is fine when compared to similar tools. **Recommendations to others considering Burp Suite:** Pro edition is far better then community edition, worth every single penny. **What problems is Burp Suite solving and how is that benefiting you?** Manual and automated web application security testing. ## Burp Suite Discussions - [You're go to extenion in Burp?](https://www.g2.com/discussions/you-re-go-to-extenion-in-burp) - 1 comment, 1 upvote - [How do i intercept network that i am connected to?](https://www.g2.com/discussions/12021-how-do-i-intercept-network-that-i-am-connected-to) - 2 comments, 1 upvote - [Do you intend extend this software abilities to scan Servers?](https://www.g2.com/discussions/11896-do-you-intend-extend-this-software-abilities-to-scan-servers) - 1 comment, 1 upvote - [What is Burp Suite Professional?](https://www.g2.com/discussions/what-is-burp-suite-professional) - 1 comment - [Is BurpSuite free?](https://www.g2.com/discussions/is-burpsuite-free) - 2 comments - [View Burp Suite pricing details and edition comparison](https://www.g2.com/products/burp-suite/reviews?page=2§ion=pricing&secure%5Bexpires_at%5D=2026-07-15+22%3A56%3A14+-0500&secure%5Bsession_id%5D=206daf36-9b3c-4e33-8ad5-299734090436&secure%5Btoken%5D=545d11282a3b536cf0edd7afd25c32560bdbbcb06bb82a46afc184dcdcbb3203&format=llm_user) ## Burp Suite Integrations - [GitLab](https://www.g2.com/products/gitlab/reviews) - [Jira](https://www.g2.com/products/jira/reviews) - [Mozilla Firefox](https://www.g2.com/products/mozilla-firefox/reviews) - [Postman](https://www.g2.com/products/postman/reviews) - [Slack](https://www.g2.com/products/slack/reviews) - [Splunk](https://www.g2.com/products/splunk-2025-01-30/reviews) - [Trello](https://www.g2.com/products/trello/reviews) ## Burp Suite Features **Administration** - API / Integrations - Extensibility - Reporting and Analytics **Administration** - API / Integrations - Extensibility **Performance** - Issue Tracking - Detection Rate - False Positives - Automated Scans **Analysis** - Issue Tracking - Reconnaissance - Vulnerability Scan **Analysis** - Reporting and Analytics - Issue Tracking - Vulnerability Scan **Network** - Compliance Testing **Testing** - Command-Line Tools - Manual Testing - Test Automation - Performance and Reliability **Testing** - Test Automation - Compliance Testing - Black-Box Scanning - Detection Rate - False Positives **Application** - Manual Application Testing - Static Code Analysis - Black Box Testing **Agentic AI - Vulnerability Scanner** - Autonomous Task Execution ## Top Burp Suite Alternatives - [Intruder](https://www.g2.com/products/intruder/reviews) - 4.8/5.0 (207 reviews) - [Acunetix by Invicti](https://www.g2.com/products/acunetix-by-invicti/reviews) - 4.1/5.0 (100 reviews) - [Invicti (formerly Netsparker)](https://www.g2.com/products/invicti-formerly-netsparker/reviews) - 4.5/5.0 (68 reviews)