PortSwigger Burp Suite Reviews and Ratings

Use Cases and Deployment Scope

We use PortSwigger Burp Suite professional mainly for testing the security of web application and APIs. it's an essential tool for our cybersecurity team during vulnerability and penetration testing. We also use it to test APIs making sure data is handled securely and only the right users have access to sensitive functions.

Likelihood to Recommend

It's great for intercepting and changing login request. For one client i had done testing of their website, and after intercepting and changing the request, I got IDOR vulnerability and it's a very high vulnerability i gave it in the report, and with the BAPP store, I downloaded the IIS TILDE enumeration and got a vulnerability.

Use Cases and Deployment Scope

We utilize PortSwigger Burp Suite for multiple aspects including our application security testing, internal red teaming exercises, and vulnerability management.

As part of our secure SDLC, we utilize PortSwigger Burp Suite for Interactive Application Security Testing (IAST) to ensure no code vulnerabilities are present.

We also utilize PortSwigger Burp Suite to validate CVE's and attempt exploitation of publicly released vulnerabilities. This provides a first hand view of what the attack is capable of.

Likelihood to Recommend

PortSwigger Burp Suite is top notch for environments with a dedicated application security team or resource. It should be part of the standard toolset for any application security program.

PortSwigger Burp Suite does require some specialized skillsets and knowledge to utilize making it not ideal for companies lacking in dedicated security staff or software engineers.

Use Cases and Deployment Scope

The PortSwigger Burp Suite plays a big role on a daily basis, but after loading extensions, the software lags too much. Active scan sends lots of junk requests, which can be improved.The software can be bit lite and more fast as in java lots of thing run slow and at a particular speed.

Likelihood to Recommend

It is the best and most widely used software for pen-testing with manual effort the automated rules plays a big role but the amazing thing is the manual editing feature of requests.Extension also are the best thing we can add in PortSwigger Burp Suite to utilize the tool at its peek.

Use Cases and Deployment Scope

With the help of PortSwigger Burp Suite we do the penetration testing of applications. It helps us in proactively identifying security defects and we can fix them before an attacker exploits them. It is a set of tools that we can use to test different type of attacks in a web application. I can also run automagic scan to identify common bugs.

Likelihood to Recommend

It helps us in proactively identifying security defects. It is easy to install, easy to use and it has a good community support. Enough training material ard available free of cost on internet to learn it. Its reporting feature is not the good it required more improvement in reporting section.

Use Cases and Deployment Scope

Our company has a set of security consultants who conducts penetration testing on all the products developed by our company on a regular basis. Being an enterprise product-based company, we have tried out many other scanning tools and ended up using burp which was the only one that helped our consultants to come up with valid and relevant bugs.

Likelihood to Recommend

Best suited if you have a team that has the ability and bandwidth to conduct manual penetration testing. In our case, many commercial tools were unable to find any valid bugs.

Not suitable to teams who needs security testing done with just one click. Reporting is also an issue with this tool.

Use Cases and Deployment Scope

Burp Suite is used by my security consultants to perform security assessments and reviews for the organization's applications. It is commonly used across the entire organization, by different groups and teams. The security consultants used the suite to perform their security assessments as well as for training for new hires.

Likelihood to Recommend

Burp Suite is a baseline for any security reviews. Security consultants and new aspiration security trainees can be more exposed to it to use as part of their course and trainings. Experienced security consultants can transfer their knowledge to the the newbies, but good to have more features to wow the newbies and mgt.

Use Cases and Deployment Scope

Working in application security, I use Burp Suite to proxy my internet traffic for inspection and manipulation to help test for security vulnerabilities. The other tool that comes to mind is OWASP ZAP, but overall Burp is generally considered to be the best tool out there for application security testers.

Likelihood to Recommend

Burp is great for all web application testing. If that is what you are doing I can't think of a scenario where it wouldn't work for you.

Use Cases and Deployment Scope

BurpSuite is being used in our organization for performing penetration testing on internal as well as external-facing applications. It is a very light-weight tool which can be installed on almost any system (even legacy systems) and be utilized to exploit the applications. The software is being used by one of the departments within our organization which is working on the cybersecurity side. The application is not intended to be used by the whole organization since it contains malicious payloads which when deployed in the production department can bring the whole environment to a halt.

Likelihood to Recommend

BurpSuite is well suited in scenarios where the user is actually trying to exploit internal applications. The controls of internal applications can always be modified and made to suit the environment of the pen-testing. However, if this was for external applications, this tool can lock out the application since it has no control over the number and time of tries. A professional can, however, use it and make the necessary changes for the external applications but it can be risky at the time, so I would recommend it to be used only on internal/non-production applications.

Use Cases and Deployment Scope

Burp Suite is a web application security testing tool. As a security consultant, I have used Burp Suite for security testing for web applications of our clients and also for my own personal research.

Likelihood to Recommend

Burp Suite is well-suited for doing testing of applications the way researchers want, in contrast to other automated security testing tools which perform tests of well-known vulnerabilities. In comparison to automated security testing tools, Burp Suite takes more time to perform the test as its a manual testing tool which can be a drawback if tests are to be carried out quickly.

Use Cases and Deployment Scope

Our security department uses it, and I use it to test the security features of applications I develop. It solves the problem of needing a quick way of intercepting HTTP requests for our web apps and running routine scans.

Likelihood to Recommend

After the initial setup, it's good for inspecting headers quickly on an application. Being able to watch all the traffic and let some through or alter them was a good visual. There is a big learning curve to this application however, it took plenty of time to get familiar with everything, as there's a lot of features that are not self-explanatory.