Burp Suite Professional is the industry-leading toolkit
powering every stage of the pentester’s workflow.
The complete toolkit for modern penetration testing
Discovery
Gather intelligence, comprehensive application mapping
and identify initial weaknesses.
Attack
Explore clues to identify vulnerabilities, validate and
analyse findings, generate a proof of concept.
Reporting
Evidence vulnerabilities, provide concise reporting and
advise on remediation.
Discovery: Map the complex attack surfaces
of modern web apps
Gather intelligence. Comprehensively map your
target application. Identify initial
weaknesses.
Intercept, log, and manipulate HTTP, HTTPS,
and WebSockets
traffic with no configuration in Burp’s
built-in browser.
Unrivalled Burp Scanner
automates mapping the attack surface in
minutes, rather than hours.
Keep a persistent log of your interactions
with the target, reducing context-switching
with the sitemap and proxy
history.
Test everything from WebSockets and SPAs,
to REST, GraphQL, and SOAP APIs. Burp is the only tool for
comprehensively testing the modern
web.
Eliminate noise with advanced filtering and
focus on the most relevant information.
"I love Burp Scanner - it's probably my number one
feature. I can remove a lot of the pain - it means I can
focus on manual testing.”
Application Security Pentester, AppSec team
Attack: Leverage best-in-class manual and
automated tools to identity
vulnerabilities
Identify specific functionality or requests
to test. Validate your findings. Generate a
proof of concept.
Burp Intruder
enables rapid fuzzing without writing a
single line of code.
Automate vulnerability scanning at
scale.
Take advantage of powerful techniques
innovated by PortSwigger’s research team
with built-in manual testing features in Burp Collaborator.
Conquer client-side attack surface without
trawling through thousands of lines of
JavaScript with DOM Invader.
Unrivalled extensibility. Leverage 10+ years of expertise from the
Burp community.
“You can't really conduct a web app pentest as a whole
without Burp Suite Professional. It would take too much
time and be super tedious. For me, Burp is
invaluable."
Johan Persson, QueenSec
Reporting: Automatic logging provides
centralised data to extract as you
need
Summarise your findings. Provide succinct,
but valuable reports in numerous formats for
remediation.
Provide as much detail as you need with
automated evidence collection and
documentation across Burp’s toolkit.
Selectively export data and log notes as you
go for streamlined writing of reports.
Burp Scanner’s ‘Path to issue’ makes it
simple to write accurate reproduction steps
for colleagues or clients.
Automatically generate PoCs to quickly
demonstrate the problem for key
stakeholders.
Fully automated report generation you can
trust from the leading web application
security toolkit.
“It's extremely useful to be able to generate a
fully-functioning proof-of-concept in two clicks. If
this feature didn't exist, then it would take me a long
time to write one myself.”
Lucas Renc, Vendavo
Try Burp Suite Professional for free
The most complete and widely used pentesting toolkit
available.
