Home / Security / Burp Suite Professional / Accounts with a subscription
Burp Suite Professional account with a paid subscription
PortSwigger
—
No offers yet
Nobody has listed this product yet. We do not invent prices: a displayed price is a public offer, and it only ever comes from a live seller.
Plans
Professional
- An annual per-tester licence, purchasable self-serve on the site
- Intercepting proxy, Repeater, Intruder and the automated vulnerability scanner
- Authenticated API scanning and mapping of complex modern attack surfaces
- Community extension store plus your own extensions through the open API
- Customization through Bambdas and BChecks
- Automatic action logging and report generation from findings
Burp AI subscription
- An annual add-on to the Professional licence instead of managing credit packs by hand
- Unrestricted AI usage within a fair-usage allowance across the whole team
- Covers the agentic mode that runs tasks inside Burp as well
- Counted by team seats, which makes procurement straightforward
- Arranged through the vendor rather than in one click
Burp Suite DAST
- A separate edition built for an organization rather than a single tester
- Scheduled scanning and runs triggered from the build pipeline
- One view of the attack surface across all your applications
- Access control, reporting and handoff of findings to your issue tracker
- The sensible choice once manual testing alone is not enough and you need a continuous scan flow
- Terms agreed under a contract
Plan contents as published by the vendor; seller prices arrive at launch.
What you get
A ready PortSwigger account with an active Professional licence: download Burp, enter the key and get to work. The first thing to establish is whose email the account uses — on someone else's email access can technically return to them, and the licence and credit balance go with it. Check the licence expiry and the remaining AI credits: credits have a shelf life and expire a year after purchase. Ask whether a corporate Burp AI add-on registered to another organization is attached to the account, because that does not transfer to you.
About the service
The working toolkit of a web application penetration tester: an intercepting proxy, request replay, an automated vulnerability scanner, a wordlist-driven attack builder and a community extension store. The AI sits inside Repeater, exactly where the manual work happens: ask it to suggest an angle, drive a finding through to confirmation, explain an unfamiliar request in plain language or make sense of a noisy scanner result. A separate agentic mode is developing that takes over the grind — from working through repetitive checks to drafting the write-up of a finding — while the decisions stay with the human. The AI features are metered in credits inside your account, and for a team there is an annual add-on instead of managing packs by hand. The licence is per person: as many testers, as many licences.
The same from another vendor