Home / Security / Burp Suite Professional / Subscriptions

Burp Suite Professional subscription

PortSwigger

No offers yet

Nobody has listed this product yet. We do not invent prices: a displayed price is a public offer, and it only ever comes from a live seller.

Log in to get the notification: without an account there is nowhere to send it.

Plans

Professional

  • An annual per-tester licence, purchasable self-serve on the site
  • Intercepting proxy, Repeater, Intruder and the automated vulnerability scanner
  • Authenticated API scanning and mapping of complex modern attack surfaces
  • Community extension store plus your own extensions through the open API
  • Customization through Bambdas and BChecks
  • Automatic action logging and report generation from findings

Burp AI subscription

  • An annual add-on to the Professional licence instead of managing credit packs by hand
  • Unrestricted AI usage within a fair-usage allowance across the whole team
  • Covers the agentic mode that runs tasks inside Burp as well
  • Counted by team seats, which makes procurement straightforward
  • Arranged through the vendor rather than in one click

Burp Suite DAST

  • A separate edition built for an organization rather than a single tester
  • Scheduled scanning and runs triggered from the build pipeline
  • One view of the attack surface across all your applications
  • Access control, reporting and handoff of findings to your issue tracker
  • The sensible choice once manual testing alone is not enough and you need a continuous scan flow
  • Terms agreed under a contract

Plan contents as published by the vendor; seller prices arrive at launch.

What you get

A Burp Suite Professional licence is issued to your email in the PortSwigger account area: settings, projects and saved testing sessions live on your own machine, while the account holds the licence itself and your AI credit balance. Check whether the licence is registered to your address — that determines whether you can renew it and buy credits yourself. Ask separately about the Burp AI add-on: without it the AI features run on credits you have to top up. The seller states the expiry date at delivery, and it is visible in the account area.

About the service

The working toolkit of a web application penetration tester: an intercepting proxy, request replay, an automated vulnerability scanner, a wordlist-driven attack builder and a community extension store. The AI sits inside Repeater, exactly where the manual work happens: ask it to suggest an angle, drive a finding through to confirmation, explain an unfamiliar request in plain language or make sense of a noisy scanner result. A separate agentic mode is developing that takes over the grind — from working through repetitive checks to drafting the write-up of a finding — while the decisions stay with the human. The AI features are metered in credits inside your account, and for a team there is an annual add-on instead of managing packs by hand. The licence is per person: as many testers, as many licences.

The same from another vendor