We Enable the World to Secure the Web

Burp Suite DAST — Automated DAST Scanning Without Limits

Automated DAST scanning without limits. Built on the Burp technology your security teams already trust.

Secure Your Whole Web Portfolio

Deploy with Ease, Report with Simplicity

Perform recurring dynamic (DAST) scans across thousands of sites. Use bulk actions to manage scanning at scale, or set sites up individually; all you need is a URL.

Make Your Security Posture Visible

Intuitive dashboards help to identify trends over time. Get scan reports by email, export to other tools, and produce reports for individual compliance standards.

DevSecOps Integration

Easy integration with any CI/CD platform, native support for Jira, GitLab, and Trello, and a rich GraphQL API — to easily incorporate security within your existing software development processes.

Reduce Risk Without Increasing Costs

Subscription options that enable companies of any size to scan at scale. Maximum ROI — with no strings attached.

Integrate Security with Development

Bake Security into Software Development Processes

A wide range of integrations (e.g. CI/CD, issue tracking platforms, and a rich GraphQL API) mean you can bake security into your software development.

Security Technology, Accessible for All

Get fast, easily-digested feedback on vulnerabilities, tailored to you. Use role-based access control (RBAC) and single sign-on (SSO) to manage teams.

Join Forces to Fix Vulnerabilities

Integrate with Jira, GitLab, or Trello, and enable developers to collaborate with AppSec teams to remediate critical issues.

Free Time for AppSec to Do More

Free Time to Eliminate Vulnerabilities

Always-on scanning keeps your reports up to date. Prioritize vulnerabilities using filters to deal with them effectively.

Work with Burp Scanner

Gold standard scanning, powered by PortSwigger Research, and trusted at over 16,000 organizations worldwide. With remediation for every vulnerability you find, it’s designed to scan the modern web.

Customize and Control

Take control with custom scan configurations and Burp extensions (BApps) — to help you hunt down even the trickiest bugs while minimizing false positives.

Burp Suite Professional — The World’s #1 Web Penetration Testing Toolkit

Use Burp Suite Professional to automate repetitive testing tasks — then dig deeper with its expert-designed manual and semi-automated security testing tools. Test for OWASP Top 10 vulnerabilities — as well as the very latest hacking techniques.

Find More Vulnerabilities, Faster

Automate and Save Time

Smart automation works in concert with expert-designed manual tools to save you time. Optimize your workflow, and do more of what you do best.

Scan the Modern Web

Burp Scanner can navigate and scan JavaScript-heavy single-page applications (SPAs), scan APIs, and enable the prerecording of complex authentication sequences.

Minimize False Positives

Ultra reliable out-of-band application security testing (OAST) can find many otherwise invisible issues — including blind/asynchronous vulnerabilities.

Test Like a Pro — With the Industry’s Trusted Toolkit

Find Vulnerabilities Others Can’t

Push the boundaries of web security testing — by being the first to benefit from the work of PortSwigger Research. Frequent releases keep you ahead of the curve.

Be More Productive

A toolkit designed and used by professional testers. Utilize features like the ability to record everything you did on an engagement — and a powerful search function — to improve efficiency and reliability.

Share Your Findings More Easily

Simplify your documentation and remediation process, and produce reports that end users will appreciate. Good security testing doesn’t end at discovery.

Extend Your Capabilities

Adapt Your Toolkit to Suit Your Needs

Share in a wealth of knowledge, extend Burp Scanner with BChecks, and access hundreds of pre-written BApp extensions as a member of Burp Suite Professional’s huge user community.

Create Your Own Functionality

A powerful API gives you access to core Burp Suite Professional functionality. Use it to create your extensions — and integrate with existing tooling.

Customize the Way You Work

Whether you want to create custom scan configurations or you’d rather just work in dark mode, we’ve got you covered. Burp Suite Professional is made to be customized.

PortSwigger offers Burp Suite Professional and Burp Suite DAST as complementary editions. Burp Suite DAST uses subscription options that enable companies of any size to scan at scale, while Burp Suite Professional is licensed per user. Contact LOGON for a formal quotation and licensing guidance tailored to your penetration testing and web security analysis requirements.

Edition & Licensing Options

LOGON Partner Services

LOGON is a PortSwigger Web Security partner and offers services that complement Burp Suite. LOGON’s consultants can discuss your penetration testing and web security analysis requirements and recommend best implementation practices and licensing options.

• Interactive Demo — See Burp Suite in action with a guided walkthrough
• Free Evaluation — Validate Burp Suite in your environment before purchase
• Implementation Services — Deployment, configuration, and integration support
• Training Services — Enable your team to get the most from Burp Suite
• Pre-Sales & Post-Sales Support — Ongoing technical guidance

Evaluation & Procurement

Demo: Contact LOGON today for an interactive demo or free evaluation.

Procurement via LOGON: LOGON offers simplified purchasing, licensing guidance, and formal quotation tailored to your penetration testing requirements.

Licensing FAQ