Item: PortSwigger Burp Suite
Rating: 9
Author: Verified User

Overall Satisfaction with PortSwigger Burp Suite

Use Cases and Deployment Scope

We use PortSwigger Burp Suite professional mainly for testing the security of web application and APIs. it's an essential tool for our cybersecurity team during vulnerability and penetration testing. We also use it to test APIs making sure data is handled securely and only the right users have access to sensitive functions.

Pros and Cons

Pros

One of the best features is the intercepting proxy, Which lets us see and change what's being sent between our browser and the website.
The repeater is great for manual testing.

Return on Investment

Using PortSwigger Burp Suite Professional has had a significant positive impact on our business by improving the quality and efficiency of our web application security testing.

Usability

The workflow between features like Proxy, Scanner, Intruder, and Repeater feels seamless, making it easy to intercept, manipulate, and analyze web traffic. Despite its advanced capabilities, the tool remains accessible and flexible, which significantly speeds up testing without overwhelming the user.

Alternatives Considered

Tenable Nessus

In addition to PortSwigger Burp Suite, I have evaluated other web application security tools like OWASP ZAP, Acunetix, and Nessus. While Nessus is excellent for network and infrastructure vulnerability scanning, it lacks the deep, interactive web application testing features PortSwigger Burp Suite offers.

Key Insights

Do you think PortSwigger Burp Suite delivers good value for the price?

Yes

Are you happy with PortSwigger Burp Suite's feature set?

Yes

Did PortSwigger Burp Suite live up to sales and marketing promises?

Yes

Did implementation of PortSwigger Burp Suite go as expected?

Yes

Would you buy PortSwigger Burp Suite again?

Yes

Other Software Used

Tenable Nessus, Abacus POS

Likelihood to Recommend

It's great for intercepting and changing login request. For one client i had done testing of their website, and after intercepting and changing the request, I got IDOR vulnerability and it's a very high vulnerability i gave it in the report, and with the BAPP store, I downloaded the IIS TILDE enumeration and got a vulnerability.

Comments

Please log in to join the conversation

PortSwigger Burp Suite A Must-Have Tool for Web App Security

Software Version