PortSwigger

“The amount of time you need to invest in order to learn Burp Suite is very small - because it doesn't involve code like other tools.”

“The Chromium browser inside Burp is really huge for us - I love it.”

“Burp Suite Professional is our main tool for all manual web application testing. The Intruder module makes it easy to automate testing of different input parameters. I've also used it successfully for brute-forcing usernames or object references.”

“With the wide range of different extenders, almost everything can be done directly from Burp Suite without needing to use Python scripting. I extensively use OAST and IAST, which is a perfect combination for pentesting.”

“WAHH is great (and still one of my favorite books) but @WebSecAcademy is HUGE source of knowledge! And the labs are really fun.”

“There are good companies with good products. some companies are even better and provide great products. above them, there is @PortSwigger: astonishing support, awesome research capabilities and a product that is simply an industry standard.”

“Not having access to Burp Suite Pro is like missing a limb ...”

“If you're not using @Burp_Suite then you're not doing bug bounties right! Seriously, it took me a long time to realize Burp was a thing, but since I began using it a year ago I can no longer live without it, and that's a good thing! #bugbounty #bugbountytips”

“I don't know how I ever lived without BurpPro @PortSwigger.”

“Burp Suite continues to be an amazing tool. For the price it's an elegant weapon for a more civilized age.”

“I find it very satisfying to both my sanity and my bank account that @Burp_Suite does a better job of finding vulnerabilities than every other web scanner I've used. It's stunning how bad $8K-10K web scanners are at finding even the most basic issue.”

“Resources like PortSwigger Research and the Web Security Academy mean PortSwigger are the experts I'd recommend to anyone wanting to expand their cybersecurity capabilities.”

“Given that Burp Scanner detects the latest web vulnerability types discovered by PortSwigger Research, it has been valuable to their ability to catch vulnerabilities that they cannot with other tools.”

“For me it's a baseline. I use it to ensure I haven't missed anything obvious and to ensure I got all the low-hanging fruits covered.”

“[Burp Suite] has been my standard tool for some years now when it comes to web app testing. No other tool that I know of is so flexible and offers the functionality in one suite.”

“most of my team right now is most familiar with Burp, so it's what we knew.”

“Burp Suite DAST will then start scanning the app and come back to us and raise any potential common web security vulnerabilities.”

“Burp Suite DAST just met our needs the most.”

“Given that Burp Scanner detects the latest web vulnerability types discovered by PortSwigger Research, it has been critical to their ability to catch vulnerabilities that they cannot with other tools.”

“Beyond pure product functionality, access to the Burp Suite user community and PortSwigger team was very important in their decision to choose Burp Suite.”

“Without Burp rest of the pentest seems to me pointless, because you cannot verify the vulnerabilities in most cases without Burp.”

“Beyond pure product functionality, access to the Burp Suite user community and PortSwigger team was essential in their decision to choose Burp Suite.”

“Good user interface, rich feature set which is extendable with pre-built and custom features. Very responsive support team.”

“I have already chosen Burp against our recommended scanning tool. Considering the flexibility in config, customer support, effectiveness in catching bugs etc.”

“"Resources like PortSwigger Research and the Web Security Academy mean PortSwigger are the experts I'd recommend to anyone wanting to improve their application security."”