Is Burp Suite Enterprise pricing public?

No longer. PortSwigger rebranded Burp Suite Enterprise to Burp Suite DAST and withdrew the published Starter/Grow/Accelerate tiers; pricing is now customised on request (checked 2026-07-27). The separate Burp Suite Professional pen-tester licence is still published at $499/user/year (raised from $449 on 6 Jan 2026).

Is there a free tier of Burp Suite Enterprise?

No formal free tier. Trials and PoCs are common.

Does Burp Suite Enterprise cover web application scanning?

Yes, that is its primary product.

Does Burp Suite Enterprise produce PCI ASV evidence?

Indirectly. PortSwigger is not on the PCI SSC list of Approved Scanning Vendors, so Burp cannot deliver the attested quarterly external ASV scan required by PCI DSS 11.3.2. Its web-app findings can feed a PCI evidence pack, but the ASV scan itself must come from a listed ASV.

How often does Burp Suite Enterprise update its vulnerability content?

PortSwigger ships new and updated scan checks through its regular Burp releases, driven by its in-house web-security research team. There is no separate daily signature feed like the network scanners publish; checks arrive with product updates.

// scanner: burp-suite-enterprise

Burp Suite Enterprise pricing 2026: now Burp Suite DAST, quote-only

PortSwigger's enterprise DAST, rebranded Burp Suite DAST. Out-of-band Collaborator detection. Pricing moved to quote-only in 2026.

author: Oliver Wakefield-Smith · verified 2026-06-26

// direct-answer

What does Burp Suite Enterprise cost in 2026?

Quote only. PortSwigger rebranded Burp Suite Enterprise to Burp Suite DAST and withdrew the former published Starter/Grow/Accelerate tiers ($8,395 to $49,425 per year); the pricing page now routes to a sales quote. The separate Burp Suite Professional pen-tester licence is still published at $499/user/year.

Pricing snapshot

Burp Suite DAST (enterprise scanner)Quote only; subscription scales by concurrent scans and app count
Former published tiers (withdrawn)Starter $8,395 / Grow $17,380 / Accelerate $49,425 per year, retired in the DAST rebrand
Burp Suite Professional (pen-tester)$499 / user / year (published; raised from $449 in Jan 2026)
Burp AI (requires Burp Suite Pro)Team subscription quote-only, or self-serve AI credit packs (pay-as-you-go)

[portswigger.net ↗]

What scales, what does not

Collaborator-style out-of-band scanning surfaces blind XSS, SSRF, OOB SQLi that black-box scanners miss.
CI/CD plug-ins for Jenkins, GitLab, GitHub Actions ship in-product.
Pricing used to be one of the few published at list in this segment; under the Burp Suite DAST rebrand it moved to quote-only. Multi-year discounts are negotiated.

Where it hits the ceiling

Burp Enterprise's CLI-first scan triggering wins for engineering-led pipelines; Invicti wins for security-led PMs running scheduled scans.

// price-bandQUOTE// verified 2026-07-27

// faq

FAQ

Is Burp Suite Enterprise pricing public?
No longer. PortSwigger rebranded Burp Suite Enterprise to Burp Suite DAST and withdrew the published Starter/Grow/Accelerate tiers; pricing is now customised on request (checked 2026-07-27). The separate Burp Suite Professional pen-tester licence is still published at $499/user/year (raised from $449 on 6 Jan 2026).
Is there a free tier of Burp Suite Enterprise?
No formal free tier. Trials and PoCs are common.
Does Burp Suite Enterprise cover web application scanning?
Yes, that is its primary product.
Does Burp Suite Enterprise produce PCI ASV evidence?
Indirectly. PortSwigger is not on the PCI SSC list of Approved Scanning Vendors, so Burp cannot deliver the attested quarterly external ASV scan required by PCI DSS 11.3.2. Its web-app findings can feed a PCI evidence pack, but the ASV scan itself must come from a listed ASV.
How often does Burp Suite Enterprise update its vulnerability content?
PortSwigger ships new and updated scan checks through its regular Burp releases, driven by its in-house web-security research team. There is no separate daily signature feed like the network scanners publish; checks arrive with product updates.