Home / Security / Burp Suite Professional / Accounts with a subscription

Burp Suite Professional account with a paid subscription

PortSwigger

No offers yet

Nobody has listed this product yet. We do not invent prices: a displayed price is a public offer, and it only ever comes from a live seller.

Log in to get the notification: without an account there is nowhere to send it.

Plans

Professional

  • An annual per-tester licence, purchasable self-serve on the site
  • Intercepting proxy, Repeater, Intruder and the automated vulnerability scanner
  • Authenticated API scanning and mapping of complex modern attack surfaces
  • Community extension store plus your own extensions through the open API
  • Customization through Bambdas and BChecks
  • Automatic action logging and report generation from findings

Burp AI subscription

  • An annual add-on to the Professional licence instead of managing credit packs by hand
  • Unrestricted AI usage within a fair-usage allowance across the whole team
  • Covers the agentic mode that runs tasks inside Burp as well
  • Counted by team seats, which makes procurement straightforward
  • Arranged through the vendor rather than in one click

Burp Suite DAST

  • A separate edition built for an organization rather than a single tester
  • Scheduled scanning and runs triggered from the build pipeline
  • One view of the attack surface across all your applications
  • Access control, reporting and handoff of findings to your issue tracker
  • The sensible choice once manual testing alone is not enough and you need a continuous scan flow
  • Terms agreed under a contract

Plan contents as published by the vendor; seller prices arrive at launch.

What you get

A ready PortSwigger account with an active Professional licence: download Burp, enter the key and get to work. The first thing to establish is whose email the account uses — on someone else's email access can technically return to them, and the licence and credit balance go with it. Check the licence expiry and the remaining AI credits: credits have a shelf life and expire a year after purchase. Ask whether a corporate Burp AI add-on registered to another organization is attached to the account, because that does not transfer to you.

About the service

The working toolkit of a web application penetration tester: an intercepting proxy, request replay, an automated vulnerability scanner, a wordlist-driven attack builder and a community extension store. The AI sits inside Repeater, exactly where the manual work happens: ask it to suggest an angle, drive a finding through to confirmation, explain an unfamiliar request in plain language or make sense of a noisy scanner result. A separate agentic mode is developing that takes over the grind — from working through repetitive checks to drafting the write-up of a finding — while the decisions stay with the human. The AI features are metered in credits inside your account, and for a team there is an annual add-on instead of managing packs by hand. The licence is per person: as many testers, as many licences.

The same from another vendor