PortSwigger
- Company typePrivate
- Founded2003
- HeadquartersKnutsford, United Kingdom
- Headcount101–250
- GTM typeB2B and B2C
- OfferingSoftware
PortSwigger firmographics
Firmographics- Name
- PortSwigger
- Legal name
- PortSwigger Ltd
- Website
- https://portswigger.net
- Company type
- Private
- Founded year
- 2003
- Operating status
- Operating
- Headcount range
- 101–250 employees
- Ownership category
- akta.pro rank
Where PortSwigger is headquartered
LocationHeadquarters
- HQ city
- Knutsford
- HQ country
- United Kingdom
- HQ region
- Europe
Offices3 records
Markets served
PortSwigger business model
Business model- GTM type
- B2B and B2C
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure
Revenue model
- Burp Suite Professional Licenses: Annual subscription licenses for Burp Suite Professional, priced at $499 per user. Supports multi-year terms (1-5 years). Revenue from individual penetration testers, security consultants, and organizations.
- Burp Suite DAST Enterprise Subscriptions: Enterprise DAST scanner subscriptions licensed by scanning requirements rather than per-user. No limit on number of users per license. Designed for AppSec teams, enterprises, and MSSPs requiring scalable security testing.
- Burp Suite Community Edition: Free community edition providing essential manual tools. Serves as top-of-funnel for professional license upgrades and trains next generation of Burp Suite users.
- Burp Suite Certified Practitioner Certification: Paid certification exam and services for validating web security testing skills. Part of revenue stream from training and certification services.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Annual | Burp Suite Professional - $499 per user annual subscription |
| Subscription | Annual | Burp Suite DAST - Organization-scoped enterprise pricing |
| Freemium | Monthly | Burp Suite Community Edition - Free |
Go-to-market motion3 records
Distribution channels5 records
Marketing channels8 records
PortSwigger product offering
Product offeringCore offering
PortSwigger develops and sells the Burp Suite platform for web application security testing, offered in three editions: Burp Suite Professional (desktop manual penetration testing toolkit at $499/user/year), Burp Suite DAST (enterprise-scale automated dynamic application security testing licensed by scanning volume), and Burp Suite Community Edition (free manual testing tools). The platform is built around Burp Scanner, which combines proprietary vulnerability detection logic, out-of-band (OAST) testing via Burp Collaborator, and AI-assisted workflows via Burp AI, drawing on PortSwigger's in-house security research team.
Product overview
PortSwigger offers a portfolio of three interconnected Burp Suite editions built around a shared Burp Scanner core: Burp Suite Professional (desktop manual penetration testing toolkit with Burp AI integration), Burp Suite DAST (enterprise-scale automated dynamic application security testing scanner with CI/CD and API integrations), and Burp Suite Community Edition (free manual testing tools). Supporting the product suite are the Web Security Academy (free online training with 200+ labs), PortSwigger Research (the company's internal research team driving vulnerability research), Burp Suite Certified Practitioner (professional certification), and the BApp Store (250+ community extensions). Burp Scanner sits at the core of all editions, powered by the company's world-leading security research.
Differentiator
Problem solved
Functional benefit
Brands
- Burp Suite: The primary product line including Burp Suite Professional (world's #1 web penetration testing toolkit), Burp Suite DAST (enterprise-enabled dynamic web vulnerability scanner), and Burp Suite Community Edition (free manual tools for web security testing).
- Web Security Academy
- PortSwigger Research
- Burp Scanner
- Burp Suite Certified Practitioner
- Burp AI
- BApp Store
- Burp Collaborator
Products and services
- Burp Suite Professional Desktop-based manual penetration testing toolkit sold as a $499/user/year annual subscription. Provides individual penetration testers, security consultants and bug bounty hunters with Proxy, Repeater, Intruder, Scanner and 250+ BApp extensions, plus Burp AI capabilities.
- Burp Suite DAST Enterprise dynamic application security testing platform licensed by scanning volume rather than per user, with no user-seat cap. Provides automated DAST scanning at scale, CI/CD integrations (Jenkins, GitLab, Azure API Management, Google Apigee), Jira/Trello/Splunk integrations, a GraphQL API, and dashboards for AppSec teams, enterprises and MSSPs.
- Burp Suite Community Edition Free downloadable edition of Burp Suite providing essential manual security testing tools (Proxy, Repeater, Intruder, Decoder, Comparer). Designed as the on-ramp for learning web security through the Web Security Academy and feeds the top of the customer funnel for Professional upgrades.
- Burp Suite Certified Practitioner Paid professional certification program administered by PortSwigger that validates a practitioner's ability to detect and exploit web vulnerabilities using Burp Suite. Includes a practice exam and proctored certification exam, with preparation drawn from the Web Security Academy.
Quantifiable outcome
- 99% of AppSec engineers perform more effectively with Burp Suite
- +4 more outcomes
Companies that use PortSwigger
Customer profileNamed customers13 records
Segments7 records
Ideal customer profiles3 records
PortSwigger technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- Yes
- API docs
- API detail
Core technology
AI maturity
App detail
Integration8 records
AI capability7 records
Feature6 records
PortSwigger partnerships and signals
Strategic signalPartnerships
Three partnerships are on record, tiered core and flagship.
- Meta Bug BountycoreMeta Bug Bounty and PortSwigger partnered to support security researchers by combining Meta's bug bounty program with PortSwigger's Burp Suite tool. PortSwigger provides Burp Suite Professional licenses to selected researchers in Meta's HackerPlus Silver leagues to enhance vulnerability discovery capabilities. The collaboration aims to build bridges between security communities and provide new tools, educational resources, and engagement opportunities for the global security research community.
- SAPflagshipPortSwigger and SAP announced a strategic partnership to enhance enterprise web security. Alijohn Ghassemlouei, Senior Director of Engineering at SAP Sovereign Cloud, stated: 'By partnering with PortSwigger and adopting Burp Suite's DAST solution, we are able to satisfy regional security requirements across multiple countries at scale, through automation, and with the lowest false positives.' The partnership enables SAP to meet regional security requirements across multiple countries.
- Reseller Partners (Hundreds)corePortSwigger works with hundreds of resellers globally to deliver Burp Suite products to customers. Resellers provide ordering, renewals, amendments, and customer support services. The company is happy to sell through any reseller and does not require partners to be listed on their website.
Scale indicators12 records
Recent moves8 records
Expansion highlights6 records
PortSwigger competitors and assessment
Company assessmentBroad incumbents
- Rapid7 (InsightAppSec / InsightVM):
- Tenable (Nessus / Tenable Web App Scanning): Tenable is a broad vulnerability management incumbent whose Web App Scanning product competes with Burp Suite DAST in enterprise security testing, offering a wider portfolio that includes infrastructure vulnerability assessment beyond web apps.
Direct peers
- Invicti: Invicti (formerly Netsparker) is a direct competitor in enterprise DAST, offering automated web vulnerability scanning with similar CI/CD integration and enterprise deployment models as Burp Suite DAST.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat6 records
Customer concentration
PortSwigger social profiles
Digital presencePortSwigger financial estimates
Financial estimateRevenue estimate
Valuation estimate
PortSwigger leadership team
Management profileNumber of profiles
Profiles4 records
PortSwigger funding detail
Funding detailFunding overview
Funding rounds1 record
Investors1 record
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
PortSwigger M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about PortSwigger
What does PortSwigger do?
PortSwigger develops and sells the Burp Suite platform for web application security testing, offered in three editions: Burp Suite Professional (desktop manual penetration testing toolkit at $499/user/year), Burp Suite DAST (enterprise-scale automated dynamic application security testing licensed by scanning volume), and Burp Suite Community Edition (free manual testing tools). The platform is built around Burp Scanner, which combines proprietary vulnerability detection logic, out-of-band (OAST) testing via Burp Collaborator, and AI-assisted workflows via Burp AI, drawing on PortSwigger's in-house security research team.
Is PortSwigger a public or private company?
PortSwigger is a private company. It is classified as venture growth investor backed and is currently operating.
When was PortSwigger founded?
PortSwigger was founded in 2003. It employs 101 to 250 people.
Where is PortSwigger based?
PortSwigger is headquartered in Knutsford, United Kingdom, in the Europe region.
How does PortSwigger make money?
Four revenue lines are on record. Burp Suite Professional Licenses are the primary driver. The others are burp Suite DAST Enterprise Subscriptions, burp Suite Community Edition and burp Suite Certified Practitioner Certification.
Who are PortSwigger's main competitors?
Broad incumbents on record are Rapid7 (InsightAppSec / InsightVM) and Tenable (Nessus / Tenable Web App Scanning). Invicti is listed as a direct peer.
Does PortSwigger have an API?
Yes. Burp Suite DAST exposes core functionality through a rich GraphQL-based API, enabling organizations to integrate automated scanning into their existing software development processes and tooling. Burp Suite Professional exposes functionality and data via a REST API. Developer documentation is at portswigger.net/burp/dast.