Burp Scanner

Burp Suite's web vulnerability scanner

Built on years of leading research, Burp Scanner finds the vulnerabilities you need to eliminate.

The web vulnerability scanner that does more

The web vulnerability scanner behind Burp Suite's popularity has more to it than most. Burp Scanner uses PortSwigger's world-leading research to help its users find a wide range of vulnerabilities in web applications, automatically.

Sitting at the core of both Burp Suite Enterprise Edition and Burp Suite Professional, Burp Scanner is the weapon of choice for over 70,000 users across more than 16,000 organizations.

of surveyed penetration testers agree that Burp Suite is "best in class" software. ^{Source: TechValidate survey of PortSwigger customers}

See more customer stories

Burp Scanner's crawler, discovering content — Burp Scanner's crawler simulates a human user - avoiding obstacles

Crawling

Navigate obstacles automatically

Burp Scanner's crawl engine cuts through obstacles like CSRF tokens, stateful functionality, and overloaded or volatile URLs like they aren't even there. And with its embedded Chromium browser, it will render and crawl even the JavaScript-heavy applications other web vulnerability scanners struggle with.

Screenshot of Burp Suite Professional site map — Burp Suite Professional's site map puts discovered content in easy reach

Discovery

Uncover more attack surface

The advanced crawling algorithm used by Burp Scanner builds up a profile of its target in a similar way to a tester. It's designed to handle dynamic content, unstable internet connections, many API definitions, and the vast scale of modern web applications. This means far fewer failed scans - and more attack surface to exploit.

Dafydd Stuttard portrait — Dafydd Stuttard
PortSwigger founder and Chief Swig

Representation of location fingerprinting — Location fingerprinting makes crawling more efficient

Performance

Fewer requests; faster scans

Burp Scanner saves a huge amount of time and wasted effort. The architecture of modern web applications can create sinkholes that will eat up requests if your web vulnerability scanner isn't prepared. Burp Scanner uses location fingerprinting techniques to identify these areas - dramatically cutting down the number of requests made while testing.

Researcher protecting Burp Scanner users — Burp Scanner automates the latest cybersecurity techniques

Expertise

Unrivaled protection against zero-day vulnerabilities

PortSwigger champions innovation. We pride ourselves on having the best security research team in the world. Burp Suite's creator wrote the book that educated a generation of pentesters. And because we regularly unearth new vulnerabilities (like HTTP desync attacks), Burp Scanner users are first to be protected against them - before hackers have a chance to strike.

James Kettle portrait — James Kettle
PortSwigger Director of Research

Screenshot of Burp Suite Enterprise Edition scan config screen — Burp Scanner's configuration menu, as seen in Burp Suite Enterprise Edition

Vulnerabilities

Test for a huge range of issues

In addition to receiving regular updates, Burp Scanner is capable of exposing a huge list of existing vulnerabilities in web applications. Scan checks can be selected individually or by group, and custom configurations can be saved. For example, a scan configuration could be created to report only vulnerabilities appearing in the OWASP Top 10.

Burp Scanner using Burp Collaborator — Burp Scanner pioneered OAST scanning

Pioneering

Innovation in dynamic scanning

Automated OAST (out-of-band application security testing) was pioneered by PortSwigger. Burp Collaborator identifies interactions between its target and an external server. This allows it to check for bugs invisible to conventional scanners - including asynchronous SQL injection and blind SSRF. Results then appear as standard in Burp Scanner's reports.

Application security testing Venn diagram — OAST scanning delivers minimal false positives - and can find bugs other methods don't

Reliability

Improved signal-to-noise-ratio

Burp Scanner utilizes a mixed methodology, designed with signal-to-noise ratio in mind. This maximizes coverage, while minimizing the number of false positives returned to the user. OAST testing in particular, produces an extremely low rate of false positives, while opening up new horizons in terms of the types of vulnerabilities it can find.

Given that Burp Scanner detects the latest web vulnerability types, discovered by PortSwigger Research, eTrends s.r.o. said that it has been critical to their ability to catch vulnerabilities that they cannot with other tools. ^{Source: TechValidate survey of PortSwigger customers}

See more customer stories

Radek Smolik

Penetration Tester

Scanning to suit your needs

Sitting at the heart of both Burp Suite Professional and Burp Suite Enterprise Edition, Burp Scanner is available to suit the needs of both individual pentesters, and whole DevSecOps or security teams.