Burp Suite Professional alternatives

Nearest on its board

1. 17
   MP

   Metasploit Prorapid7.com
   4.3 APIOpenFree —
   →
2. 19
   CI

   Core Impactfortra.com
   4.1 APIOpenFree —
   →
3. 16
   M

   Metasploitmetasploit.com
   4.9 APIOpenFree Free tier
   →
4. 20
   HP

   HackerOne Pentesthackerone.com
   4.1 APIOpenFree —
   →
5. 15
   BD

   BreachLock DASTbreachlock.com
   5.0 APIOpenFree From $5,000/yr
   →
6. 21
   V

   vPenTestvonahi.io
   4.1 APIOpenFree —
   →
7. 14
   SE

   Social-Engineer Toolkit (SET)github.com
   5.1 APIOpenFree Free tier
   →
8. 22
   BP

   Bugcrowd Penetration Testingbugcrowd.com
   4.0 APIOpenFree —
   →
9. 13
   N

   NodeZerohorizon3.ai

   NodeZero autonomously runs penetration tests to find exploitable attack paths, guide remediation, and verify fixes.

   5.3 APIOpenFree —
   →
10. 12
    CP

    Cymulate Platformcymulate.com

    Cymulate continuously validates security controls against real-world threats and provides guidance to improve defenses.

    5.3 APIOpenFree —
    →
11. 11
    S

    SCYTHEscythe.io

    SCYTHE is a continuous Adversarial Exposure Validation platform that emulates real adversary behavior to validate security controls in an organization's…

    5.6 APIOpenFree —
    →
12. 10
    AS

    Astra Securitygetastra.com

    Astra describes its offering as a continuous penetration testing platform for web applications, APIs and cloud infrastructure.

    5.6 APIOpenFree From $699/yr
    →
13. 9
    PS

    Picus Security Platformpicussecurity.com

    The Picus platform validates attack surfaces, exposures, and security controls so teams can prioritize and address risks.

    5.9 APIOpenFree —
    →
14. 8
    BL

    BlackArch Linuxblackarch.org

    BlackArch Linux is an Arch Linux based penetration testing distribution for penetration testers and security researchers.

    5.9 APIOpenFree Free tier
    →
15. 7
    PT

    Pentest-Tools.com API Scannerpentest-tools.com

    The online API Vulnerability Scanner assesses APIs and detects vulnerabilities including SQL injection, SSRF, local file inclusion, code injection, and request…

    6.2 APIOpenFree Free tier · from $95/mo
    →
16. 6
    AR

    Atomic Red Teamatomicredteam.io

    Atomic Red Team is a library of simple tests that security teams can execute to test their controls.

    6.2 APIOpenFree Free tier
    →
17. 5
    I

    ImmuniWebimmuniweb.com
    6.3 APIOpenFree Free tier · from €595/yr
    →
18. 4
    SR

    Stratus Red Teamstratus-red-team.cloud

    Stratus Red Team is a self-contained binary for running granular offensive attack techniques against a live cloud environment to validate detections.

    6.3 APIOpenFree Free tier
    →
19. 3
    AP

    AttackIQ Platformattackiq.com

    AttackIQ is a continuous threat exposure management platform that links vulnerabilities, configurations, identities and detections to adversary-validated…

    6.7 APIOpenFree Free tier · from $4,995/mo
    →
20. 2
    OZ

    OWASP ZAPzaproxy.org

    ZAP is a web application security scanner and interception proxy for automated and manual testing.

    7.6 APIOpenFree Free tier
    →