A proxy sits between the browser and the site, so testers can inspect and change requests. Scanner, repeater, and intruder tools probe for issues such as injection and broken access control. Extensions add features, including AI-assisted ones.
A free community edition covers manual testing, while the professional and enterprise editions add automation.
OWASP ZAP is a free alternative. Burp Suite suits security analysts who test web apps.
// alternatives to Burp Suite see all →
// related tools in Cybersecurity
Autopsy
Open-source digital forensics platform
Metasploit
Penetration testing framework with a large library of exploits
Nmap
Open-source network scanner for host and service discovery
Recorded Future
Threat intelligence platform for security teams
Tenable
Vulnerability management and exposure assessment platform