Best-In-Class for Web Application Security, Testing, Scanning

Trusted by security engineers and penetration testers to secure the web and speed up software delivery.

Get Started with Portswigger

LOGON is a PortSwigger Web Security partner and offers services that complement BurpSuite.

LOGON’s consultants can discuss your penetration testing and web security analysis requirements and recommend best implementation practices and licensing options.

Secure Your World

Burp Suite Professional and Burp Suite Enterprise Edition are designed to compliment each other and be used together. Using the two together ultimately results in comprehensive security testing, enhancing an organization’s ability to identify and remediate vulnerabilities effectively.

Burp Suite DAST
Burp Suite Professional

Burp Suite DAST

Automated DAST scanning without limits. Built on the Burp technology your security teams already trust.

Secure your whole web portfolio

Deploy with ease, report with simplicity

Perform recurring dynamic (DAST) scans across thousands of sites. Use bulk actions to manage scanning at scale, or set sites up individually; all you need is a URL.

Make your security posture visible

Intuitive dashboards help to identify trends over time. Get scan reports by email, export to other tools, and produce reports for individual compliance standards.

DevSecOps integration

Easy integration with any CI/CD platform, native support for Jira, GitLab, and Trello, and a rich GraphQL API – to easily incorporate security within your existing software development processes.

Reduce risk without increasing costs

Subscription options that enable companies of any size to scan at scale. Maximum ROI – with no strings attached.

Integrate security with development

Bake security into software development processes

A wide range of integrations (e.g. CI/CD, issue tracking platforms, and a rich GraphQL API) mean you can bake security into your software development.

Security technology, accessible for all

Get fast, easily-digested feedback on vulnerabilities, tailored to you. Use role-based access control (RBAC) and single sign-on (SSO) to manage teams.

Join forces to fix vulnerabilities

Integrate with Jira, GitLab, or Trello, and enable developers to collaborate with AppSec teams to remediate critical issues.

Free time for AppSec to do more

Free time to eliminate vulnerabilities

Always-on scanning keeps your reports up to date. Prioritize vulnerabilities using filters to deal with them effectively.

Work with Burp Scanner

Gold standard scanning, powered by PortSwigger Research, and trusted at over 16,000 organizations worldwide. With remediation for every vulnerability you find, it’s designed to scan the modern web.

Customize and control

Take control with custom scan configurations and Burp extensions (BApps) – to help you hunt down even the trickiest bugs while minimizing false positives.

Burp Suite Professional

The world’s #1 web penetration testing toolkit.

BurpSuite Professional Edition

Use Burp Suite Professional to automate repetitive testing tasks – then dig deeper with its expert-designed manual and semi-automated security testing tools. Test for OWASP Top 10 vulnerabilities – as well as the very latest hacking techniques.

Find more vulnerabilities, faster

Automate and save time

Smart automation works in concert with expert-designed manual tools to save you time. Optimize your workflow, and do more of what you do best.

Scan the modern web

Burp Scanner can navigate and scan JavaScript-heavy single-page applications (SPAs), scan APIs, and enable the prerecording of complex authentication sequences.

Minimize false positives

Ultra reliable out-of-band application security testing (OAST) can find many otherwise invisible issues – including blind/asynchronous vulnerabilities.

Test like a pro – with the industry’s trusted toolkit

Find vulnerabilities others can’t

Push the boundaries of web security testing – by being the first to benefit from the work of PortSwigger Research. Frequent releases keep you ahead of the curve.

Be more productive

A toolkit designed and used by professional testers. Utilize features like the ability to record everything you did on an engagement – and a powerful search function – to improve efficiency and reliability.

Share your findings more easily

Simplify your documentation and remediation process, and produce reports that end users will appreciate. Good security testing doesn’t end at discovery.

Extend your capabilities

Adapt your toolkit to suit your needs

Share in a wealth of knowledge, extend Burp Scanner with BChecks, and access hundreds of pre-written BApp extensions as a member of Burp Suite Professional’s huge user community.

Create your own functionality

A powerful API gives you access to core Burp Suite Professional functionality. Use it to create your extensions – and integrate with existing tooling.

Customize the way you work

Whether you want to create custom scan configurations or you’d rather just work in dark mode, we’ve got you covered. Burp Suite Professional is made to be customized.