Burp Suite Enterprise Edition spring update 2024

We understand the unique challenges AppSec teams face – from navigating the rapid pace of development to achieving comprehensive coverage against new vulnerabilities. That’s why our latest updates to Burp Suite Enterprise Edition have focused on improving the automated testing capabilities and simplifying and enhancing workflows for you and your teams.

Check out the recent release of Burp Suite Enterprise Edition:

Burp Suite Enterprise Edition in the Cloud

Your team can now scale up your scanning efforts with automated, scheduled DAST scans without hosting and maintaining your infrastructure. This new cloud-based version enables you to:

• Scan your applications like an actual attacker would
• Set up recurring, scheduled scans within minutes
• Easily share access and reports with your entire team

Custom Scan Checks

Building on the extensibility added to Burp Suite Professional, you can import custom scan checks into Burp Suite Enterprise Edition. These “BChecks” allow you to quickly and easily extend Burp Scanner to tailor scans to your applications’ frameworks, achieving targeted coverage for new and novel vulnerabilities.

CI-Driven Scans

Preventing vulnerable apps from hitting production is a crucial AppSec challenge. We’ve made it quick and easy to integrate automated, scheduled DAST scans with any CI/CD platform. This lets you get fast security feedback from your web developers, saving time and costs while keeping your web estate more secure.

Scanning Performance Improvements

We’ve made enhancements to scanning performance, including:

• Reducing browser instances during audits for more memory-efficient scans
• Further improvements in memory usage for browser-powered scans
• Better identification and disregard of duplicate items

ISO 27001 2022 Certification

We’re delighted to announce PortSwigger’s recent ISO 27001 2022 certification acquisition, demonstrating our ongoing commitment to information security.

Roadmap in 2024

In the following year, you can expect to see improvements such as:

• Enhanced API testing capabilities
• WebSockets support for more comprehensive coverage
• New scan checks, including for web cache deception vulnerabilities
• Multi-factor authentication
• Tighter integration between Burp Suite Professional and Enterprise Edition

Burp Suite Enterprise

Automated DAST scanning without limits. Built on the Burp technology your security teams already trust.

Join Live Walkthrough

LOGON is a Portswigger partner. Take a deep dive into Burp Suite Enterprise Edition Architecture, and discover how you gain complete visibility of your attack surface, empowering your developers.