BurpSuite

BurpSuite (Burp Suite) is a toolkit for testing the security of web applications. It is made by PortSwigger, which also runs the Web Security Academy and publishes its own security research.

What BurpSuite offers

• Testing tools — a proxy, repeater, intruder, scanner and other modules used by penetration testers.
• Extensions — a community-built extension store adds further features.
• Enterprise edition — a version for scanning at organisational scale, distinct from the Professional edition.
• Web Security Academy — hands-on labs, with over 270 available, for learning attack techniques.
• Certification — a Burp Suite Certified Practitioner exam.

Who it works with

Penetration testers, application security teams and content creators in the security community use it. PortSwigger says more than 18,000 organisations and about 90,000 practitioners in over 170 countries use the tool.

Key facts

• Maker: PortSwigger
• Editions: Professional and Enterprise
• Age: Has been used for over 20 years