Burp Suite

Burp Suite is a set of tools by PortSwigger for testing the security of web applications. It supports the whole penetration testing workflow: mapping the attack surface of an application, identifying vulnerabilities with manual and automated tools, and logging findings in a central place for reporting.

Burp Suite Professional is the desktop toolkit for penetration testers; it includes a web vulnerability scanner, an AI assistant for daily workflows and an extension mechanism that has been available for more than ten years, with a large catalogue of community extensions. Burp Suite DAST provides automated, CI-driven dynamic scanning so that development teams can find issues before release. A free Community Edition offers the core manual tools.

Burp Suite is a commercial product; Burp Suite Professional can be tried for free.