Try our new research platform with insights from 80,000+ expert users
PortSwigger Burp Suite Professional Logo

PortSwigger Burp Suite Professional pros and cons

Vendor: PortSwigger
4.3 out of 5
Badge Ranked 1

Pros & Cons summary

Buyer's Guide

Get pricing advice, tips, use cases and valuable features from real users of this product.
Get the report

Prominent pros & cons

PROS

PortSwigger Burp Suite Professional excels in automatically and accurately detecting vulnerabilities with its powerful Burp scanner and Intruder tool.
Users appreciate its ability to report fewer false positives compared to other tools, significantly aiding in bug and vulnerability detection for simple web apps.
The Burp Extender feature allows users to enhance functionality with a variety of plugins, expanding the range of security checks available.
Its efficient active scanner and comprehensive testing models facilitate swift and thorough vulnerability assessments and penetration testing.
PortSwigger Burp Suite Professional supports API scanning and automates tasks such as authorization testing, time-saving for users.

CONS

There is a need for improved API security testing and integration with other tools like Jenkins.
Many users experience challenges with false positives, requiring additional verification effort.
Pricing is considered high, and local currency options for regions like Brazil would be beneficial.
Users mention the reporting feature lacks informativeness and could offer different formats like PDF.
New users find the setup process complex, and there's a demand for better documentation and user guides.
 

PortSwigger Burp Suite Professional Pros review quotes

it_user245421 - PeerSpot reviewer
Senior Security Consultant at a tech services company with 501-1,000 employees
May 28, 2015
This is by far the best application assessment tool I have used.
it_user492585 - PeerSpot reviewer
Information Systems Security Officer at a financial services firm with 1,001-5,000 employees
Aug 8, 2016
The free version is one of the best proxy tools for manual testing.
it_user496968 - PeerSpot reviewer
Penetration Testing Advisor at a tech services company with 1,001-5,000 employees
Nov 7, 2016
I found the best value, features and documentation in Burp.
Learn what your peers think about PortSwigger Burp Suite Professional. Get advice and tips from experienced pros sharing their opinions. Updated: March 2026.
884,976 professionals have used our research since 2012.
it_user704997 - PeerSpot reviewer
Senior Information Security Analyst at a tech services company with 10,001+ employees
Dec 19, 2017
I personally love its capability to automatically and accurately detect vulnerabilities. So, I would say it is the Burp scanner that is THE most powerful, valuable, and an awesome feature.
Securitydbe0 - PeerSpot reviewer
Security Analyst at a tech services company with 201-500 employees
Feb 3, 2019
"The product is very good just the way it is; It has everything already well established and functions great. I can't see any way for this current version to be improved."
it_user787785 - PeerSpot reviewer
Senior Security Engineer at a insurance company with 10,001+ employees
May 16, 2019
This tool is more accurate than the other solutions that we use, and reports fewer false positives.
IB
Security Specialist at Alfa-A IT
May 29, 2019
This solution has helped a lot in finding bugs and vulnerabilities, and the scanner is good enough for simple web apps.
reviewer939417 - PeerSpot reviewer
IT Auditor & Compliance Officer at a tech vendor with 51-200 employees
Jun 6, 2019
Some of the extensions, available using Burp Extender, are also very good and we have found issues by using them.
Jul 7, 2019
BurpSuite helps us to identify and fix silly mistakes that are sometimes introduced by our developers in their coding.
VN
Director - Head of Delivery Services at Ticking Minds Technology Solutions Pvt Ltd
Jan 2, 2020
Once I capture the proxy, I'm able to transfer across. All the requested information is there. I can send across the request to what we call a repeater, where I get to ready the payload that I send to the application. Put in malicious content and then see if it's responding to it.
 

PortSwigger Burp Suite Professional Cons review quotes

it_user245421 - PeerSpot reviewer
Senior Security Consultant at a tech services company with 501-1,000 employees
May 28, 2015
There are some memory issues, where the application runs out of memory and crashes.
it_user492585 - PeerSpot reviewer
Information Systems Security Officer at a financial services firm with 1,001-5,000 employees
Aug 8, 2016
The professional edition of Burp Suite provides some automated pen-testing scripts to detect application vulnerabilities, like SQL injection, XSS, etc. However, this component is not extremely useful.
it_user496968 - PeerSpot reviewer
Penetration Testing Advisor at a tech services company with 1,001-5,000 employees
Nov 7, 2016
Spidering large websites can use a lot of memory and might result in a crash on systems with lower RAM.
Learn what your peers think about PortSwigger Burp Suite Professional. Get advice and tips from experienced pros sharing their opinions. Updated: March 2026.
884,976 professionals have used our research since 2012.
it_user704997 - PeerSpot reviewer
Senior Information Security Analyst at a tech services company with 10,001+ employees
Dec 19, 2017
The one feature that I would like to see in Burp is active scanning of REST based web services. A lot of organizations are providing APIs to access their services to support different business models like SaaS. Scanning these APIs is still a challenge for many security product companies.
Securitydbe0 - PeerSpot reviewer
Security Analyst at a tech services company with 201-500 employees
Feb 3, 2019
The Initial setup is a bit complex.
it_user787785 - PeerSpot reviewer
Senior Security Engineer at a insurance company with 10,001+ employees
May 16, 2019
There is a lot to this product, and it would be good if when you purchase the tool, they can provide us with a more extensive user manual.
IB
Security Specialist at Alfa-A IT
May 29, 2019
The scanner and crawler need to be improved.
reviewer939417 - PeerSpot reviewer
IT Auditor & Compliance Officer at a tech vendor with 51-200 employees
Jun 6, 2019
I would like to see a more optimized solution, as it currently uses a lot of CPU power and memory.
Jul 7, 2019
The Auto Scanning features should be updated more frequently and should include the latest attack vectors.
VN
Director - Head of Delivery Services at Ticking Minds Technology Solutions Pvt Ltd
Jan 2, 2020
The biggest improvement that I would like to see from PortSwigger that today many people see as an issue in their testing. There might be a feature which might be desired.