About the manufacturer
PortSwigger Ltd. is the British company that develops Burp Suite, the family of web application security testing tools used by offensive security professionals and AppSec teams. It was founded in 2008 by Dafydd Stuttard, who remains CEO and is the author of The Web Application Hacker's Handbook, a reference work in the field. It is a privately held company headquartered in Knutsford, Cheshire, England, with additional offices in London and Atlanta opened in 2025. In June 2024 it took its first ever outside investment, led by the firm Brighton Park Capital.
PortSwigger's technology rests on two pillars. The first is the intercepting proxy: HTTP and HTTPS traffic between the browser and the application flows through Burp Proxy, where each request can be paused, edited and reissued — which is what makes it possible to test business logic and permission chaining. The second is Burp Scanner, an active and passive scanning engine with a Chromium-powered crawler, coverage of the OWASP Top 10 categories and out-of-band detection through Burp Collaborator, able to find flaws such as blind SSRF that produce no visible response in the application. The same engine runs in the manual testing product and in the automated scanner, which keeps findings reproducible between the two.
PortSwigger product lines:
- Burp Suite Professional — manual web application security testing toolkit, with Burp Proxy, Burp Repeater, Burp Intruder, Burp Scanner and extensions the BApp Store and the Montoya API.
- Burp Suite DAST — automated scanner for enterprise portfolios, formerly Burp Suite Enterprise Edition, running as managed Cloud, self-hosted, on Kubernetes or as a pipeline container.
- Burp Suite Community Edition — free edition with the core manual tools, without active scanning, aimed at learning and first tests.
- Dastardly — lightweight free scanner for continuous integration pipelines, shipped as a container and derived the Burp Scanner engine.
- Burp AI and Burp AT — artificial intelligence features inside Burp Suite Professional, with Burp AT released in public beta in July 2026 for agentic testing.
- Web Security Academy — free web security training platform with more than 190 interactive labs, and the basis of the Burp Suite Certified Practitioner certification.
According to PortSwigger, Burp Suite is used by more than 90,000 security professionals and 18,000 organisations across more than 170 countries. On Gartner Peer Insights, in the Application Security Testing market, PortSwigger holds a 4.7-star rating and has received the Customers' Choice distinction.
OSB Software is an official PortSwigger partner in Brazil and supplies 100% genuine Burp Suite licenses to companies, with Brazilian invoicing, local contracting and support in Portuguese. Request a quote to size your licensing with specialists and buy imported software in full legal compliance.
Software by PortSwigger Ltd.
2 products
Not sure which software
you need?
Tell us about your need and our team helps you choose the ideal solution — from over 10,000 options in our catalog.
