Burp Suite

Web application penetration testing toolkit from PortSwigger.

softwareSecurity Auditingpenetration-testingweb-securityvulnerability-scanning

Alternatives

OWASP ZAP

ZAP (Zed Attack Proxy) is a free and open-source web application security scanner that started under the OWASP umbrella and is now stewarded by Checkmarx with independent open-source governance.

✦ Best for teams wanting a free, extensible dast scanner that fits both manual pentesting and ci/cd automation.

FreeProprietaryWindowsMacLinuxOpen SourceIntercepting ProxyActive & Passive Scan

“Both are free web‑app security tools focused on intercepting and manipulating HTTP traffic for manual pen‑testing.”

About the Product

Unclaimed Listing

Platforms

Windows Mac Linux

Target AudiencePenetration testers and application security teams

Is this your tool?

Claim this page to update details, reply to user reviews, and drive more traffic to your product.

Claim this Product →

Show you’re listed

Add this badge to your website. It links back to this page.

Get your badge →