// scanner: burp-suite-enterprise
Burp Suite Enterprise pricing 2026: now Burp Suite DAST, quote-only
PortSwigger's enterprise DAST, rebranded Burp Suite DAST. Out-of-band Collaborator detection. Pricing moved to quote-only in 2026.
author: Oliver Wakefield-Smith · verified 2026-09-23
// direct-answer
What does Burp Suite Enterprise cost in 2026?
Quote only. PortSwigger rebranded Burp Suite Enterprise to Burp Suite DAST and withdrew the former published Starter/Grow/Accelerate tiers ($8,395 to $49,425 per year). Re-checked on 23 September 2026, the pricing page carries no figure at all: it says only that 'our subscriptions are customized based on your specific requirements' behind a get-in-touch form. The separate Burp Suite Professional pen-tester licence is still published, at $499 per user per year or 419 per user per year in GBP.
Pricing snapshot
- Burp Suite DAST (enterprise scanner)Quote only; subscription scales by concurrent scans and app count
- Former published tiers (withdrawn)Starter $8,395 / Grow $17,380 / Accelerate $49,425 per year, retired in the DAST rebrand
- Burp Suite Professional (pen-tester)$499 / user / year, or 419 / user / year in GBP (published; raised from $449 in Jan 2026)
- Burp AI (requires Burp Suite Pro)No published price either way: annual subscription priced by team seat requirements on request, or self-serve credit packs that expire after 12 months and cannot be pooled across users
What scales, what does not
- Collaborator-style out-of-band scanning surfaces blind XSS, SSRF, OOB SQLi that black-box scanners miss.
- CI/CD plug-ins for Jenkins, GitLab, GitHub Actions ship in-product.
- Pricing used to be one of the few published at list in this segment; under the Burp Suite DAST rebrand it moved to quote-only. Multi-year discounts are negotiated.
Where it hits the ceiling
Burp Enterprise's CLI-first scan triggering wins for engineering-led pipelines; Invicti wins for security-led PMs running scheduled scans.
// faq
FAQ
- Is Burp Suite Enterprise pricing public?No longer. PortSwigger rebranded Burp Suite Enterprise to Burp Suite DAST and withdrew the published Starter/Grow/Accelerate tiers. Its pricing page now carries no figure at all, saying only that 'our subscriptions are customized based on your specific requirements' behind a get-in-touch form (re-checked 2026-09-23). The separate Burp Suite Professional pen-tester licence is still published at $499/user/year, or 419 per user per year in GBP, raised from $449 on 6 Jan 2026.
- Is there a free tier of Burp Suite Enterprise?No formal free tier. Trials and PoCs are common.
- Does Burp Suite Enterprise cover web application scanning?Yes, that is its primary product.
- Does Burp Suite Enterprise produce PCI ASV evidence?Indirectly. PortSwigger is not on the PCI SSC list of Approved Scanning Vendors, so Burp cannot deliver the attested quarterly external ASV scan required by PCI DSS 11.3.2. Its web-app findings can feed a PCI evidence pack, but the ASV scan itself must come from a listed ASV.
- How often does Burp Suite Enterprise update its vulnerability content?PortSwigger ships new and updated scan checks through its regular Burp releases, driven by its in-house web-security research team. There is no separate daily signature feed like the network scanners publish; checks arrive with product updates.