It can check for SQL injection, cross-site scripting (XSS) and other vulnerabilities (including those listed in the OWASP top 10). Major retailers, banks and governments use it to protect applications. activities.īurp bills itself as the world’s most widely used web vulnerability scanner. The free version has essential manual tools for carrying out scanning. The Community Edition consists of a series of manual tools and is aimed at researchers and hobbyists.The Professional version doesn’t have scheduling, enterprise scalability or CI integration.

The Enterprise Edition comes with an automated Web vulnerability scanner, scheduling of scans, scalability across the enterprise, and CI integration as well as a series of manual tools.Key features: PortSwigger Web Security offers the Burp web vulnerability scanner in three flavors: Security professionals needing only a good automated vulnerability scanner for code testing can make do with the much cheaper Professional version.įor more on the Burp Suite, see Getting Started with the Burp Suite: A Pentesting Tutorial A free version is limited in functionality, so those interested in the complete package for enterprise-wide scalability and automation should be prepared to pay well. PortSwigger Web Security’s Burp is a top-rated web vulnerability scanner used in many organizations and is found in most penetration testing toolkits, though its strength is more on the scanning side than on penetration. See our complete list of top penetration testing tools.

Burp suite pro scanner tutorial