Great software for Web Application Penetration Testing. It has all the features that you need, and most of the time using solely Burp Suite is enough to carry different types of attacks. Review collected by and hosted on G2.com.

Bruteforce slow in the Community Edition. If you need to do so you will need to buy the professional version, or use other programs such as OWASP Zap or Hydra. Review collected by and hosted on G2.com.

Reliable and most useful tool to work on. The scan coverage and minimum error is the best part. Review collected by and hosted on G2.com.

Nothing as of now as this is improving day by day. Review collected by and hosted on G2.com.

Every penetration testers first and best choice is burpsuite, as you can say that, this is a package of internal tool which is used for web application VAPT as a dynamic analysis of Web application. Review collected by and hosted on G2.com.

Nothing more for dislike but little bit false positive we are getting during scanning the application through this tool.This is not used for static analysis of the Application or we can't not use as a SAST analysis tool. Review collected by and hosted on G2.com.

Helped our team to procure this tool. As this tool has lots of built-in functionalities to test the application. This tool helping to our bug hunting team to identify the bugs in the applications. Review collected by and hosted on G2.com.

We haven't faced any problems with this tool. Review collected by and hosted on G2.com.

I like the active scan feature of Burp Suite. It gives a rough idea of the possible vulnerabities in the application.

Furthermore, I love how Burp has mixed a lot of extensions for different technologies, different vulnerabilities which makes the tool more usable and flexible to use. Additionally , the User Experience is also appealing to use and is organized nicely to accomodate all the user needs. Overall, I really like this tool, and use almost everyday to learn, perform web application penetration testing and just for fun sometimes. Review collected by and hosted on G2.com.

The community version of the application makes you remind again and again to buy the pro version. I agree that the pro version is better with a lot of features, but the reminder bugs me sometimes.

One more thing, I would like to add is that Portswigger needs an elaborated tutorial on the extensions. However, the material available on the web is also pretty useful. Review collected by and hosted on G2.com.

It has all the essential tools for a pentester. Also, portswigger team actively involves multiple researchers about new variant attacks and improves the ability of the vulnerability scanner. Moreover, it has very user-friendly interfaces so that anyone can use it without any training or guidance. I like its repeater feature that helps me to analyze the minor changes in HTTP response during the pentest. Review collected by and hosted on G2.com.

I feel its price is a little bit high. Apart from that, I don't see any functional lack. Review collected by and hosted on G2.com.

The most important feature which i like and use is the feature to intercept and modify http request on the go to check the system error handling capablitites. Review collected by and hosted on G2.com.

Reporting can be improved while running the proxy, also sometime while configuring burpsuite proxy to a chrome browser, it sometimes messes up the chrome settings so to remove that we often have to relaunch the browser. Review collected by and hosted on G2.com.

Ease of use, so many features for the penetration testing of web application, automated scanning and browser proxy features Review collected by and hosted on G2.com.

interface can be more attractive and also it consumes more system resources Review collected by and hosted on G2.com.

It's UI is so easy to use and it's fast. Review collected by and hosted on G2.com.

Some of the features is not available in free version. It's understandable! Review collected by and hosted on G2.com.

All the feature of burp suite is best. No other tool can compete burpsuite. Feature like repeter, intruder, sequencer, burp collaborator, burp pluggins etc. All are best. Review collected by and hosted on G2.com.

Nothing. I strongly recommend burp auite to manual pentest. No other tool can match burp suite. I would suggest the aftive scan and passive scan be more better. Review collected by and hosted on G2.com.