Burp Suite Enterprise Edition engineering team

Key functionality

Burp Suite Enterprise Edition is a multi-user web application which provides scan scheduling, results management, and dashboard reporting to enable businesses to scan their web applications and resolve issues.

Key integrations include our own Burp Suite scanner, a public-facing GraphQL API for adding sites, scheduling scans and collecting results, Jira for automatic ticket creation, and SAML and LDAP for single sign-on.

The product also provides a CI/CD driver with plug-ins for Jenkins, Team City, and Azure DevOps.

Problem space

As an enterprise product team, we tackle integrations with external systems such as continuous integration, issue tracking and user authentication. We also provide industry standard APIs for customers to implement their own integrations.

We design a product that is visually appealing as well as presenting concise information for customers with a wide range of knowledge and skills.

Our platform is designed with resilience built-in, so that we can ensure that scans continue to run and results are reported even in the event of potential network failures.

Our product can run on-premise, on single server machines for a minimal installation, and multiple servers where scanning of multiple large scale web applications in parallel is needed. It is also available for installation on cloud platforms including AWS and Azure.

Technologies

The front-end web application is a modern JavaScript single page application (SPA) written using React. The back-end server components are implemented in Java and communicate with the front-end using GraphQL.

Deployment platforms are Windows, Mac, Linux, AWS, Azure, and other cloud platforms. Our cloud versions are deployed using Kubernetes.

Our tooling includes IntelliJ IDEA, JUnit, Mockito, git, Gradle, TeamCity, Docker, Kubernetes, and various AWS and Azure services.