Is Burp Suite Professional priced per user or per company?

Per user, and PortSwigger spells it out on the order form: 'Everyone who uses Burp Suite Professional needs to have a subscription. You cannot share a single Burp Suite Professional subscription between multiple users, even if only one person uses it at a time.' A team of five costs 5 x $499 = $2,495 per year. Licences are named-user subscriptions, not floating or per-company.

What is the difference between Burp Suite Professional and Community?

Community Edition is free but ships only the manual tools (proxy, Repeater, Decoder and a rate-limited Intruder) with no automated vulnerability scanner. Professional adds the automated scanner, unthrottled Intruder, saved projects, the BApp store and Burp AI features. If you need automated web scanning, you need Professional.

Is Burp Suite Professional the same as Burp Suite Enterprise?

No. Professional is a per-seat desktop tool for manual pen-testers at a published $499/user/year. Burp Suite Enterprise, rebranded Burp Suite DAST, is the automated, CI/CD-integrated, multi-user scanner sold quote-only after PortSwigger withdrew its former published tiers. They are separate products with separate pricing.

Does a Burp Suite Professional licence include Burp AI?

No. A Pro licence is the entry requirement (you cannot even buy AI credits without one) but Burp AI is metered separately and PortSwigger publishes no price for it. You either buy self-serve credit packs, which expire 12 months after purchase and are tied to one user with no pooling across a team, or add a Burp AI Subscription to the Pro licence, priced annually by team seat requirements on request. Budget Burp AI as a second line item, not as something the $499 covers.

Does Burp Suite Professional produce PCI ASV evidence?

No. PortSwigger is not on the PCI SSC list of Approved Scanning Vendors, so Burp cannot deliver the attested quarterly external ASV scan required by PCI DSS 11.3.2. Its findings can feed a PCI evidence pack, but the ASV scan itself must come from a listed ASV such as Qualys, Tenable or Rapid7.

// scanner: burp-suite-professional

Burp Suite Professional cost 2026: $499 per user per year

PortSwigger's per-seat desktop tool for manual web pen-testers. Published list price, raised from $449 to $499 on 6 January 2026.

author: Oliver Wakefield-Smith · verified 2026-09-23

// direct-answer

How much does Burp Suite Professional cost in 2026?

$499 per user per year, published on portswigger.net/burp/pro; the order form shows the same licence at 419 per user per year in GBP and offers 1, 3 and 10-year terms. It is a named-user subscription, so five pen-testers need five licences ($2,495/year), and PortSwigger states you cannot share one subscription between users even if only one person uses it at a time. There is no cheaper monthly or company-wide plan. What the $499 buys over the free Community Edition is the automated scanner and access to Burp AI; Burp AI usage itself is metered separately and is not included.

Pricing snapshot

Burp Suite Professional$499 / user / year (published; raised from $449 on 6 Jan 2026)
GBP list419 / user / year; USD, EUR and GBP all selectable on the order form
Term options1, 3 or 10 years; multi-year discount not published
Team of 5 pen-testers5 x $499 = $2,495 / year (one named-user licence each)
Burp Suite Community (free)Manual proxy, Repeater, rate-limited Intruder; no automated scanner
Burp Suite Enterprise / DASTSeparate product; quote-only since the DAST rebrand
Burp AISecond line item; credits or an unpriced annual subscription, both on top of the $499

[portswigger.net/burp/pro ↗] [portswigger.net/buy/pro ↗]

What you pay for over Community

The automated vulnerability scanner (Community is manual-only).
Unthrottled Intruder, saved project files and the full BApp extension store.
Burp AI features, which require a Pro licence and run on a credit model.

Where it hits the ceiling

Professional is a single-tester desktop tool. Once you need scheduled or CI/CD scanning across many applications, or multi-user dashboards, PortSwigger points you at Burp Suite DAST (the old Enterprise), which is quote-only and priced by concurrent scans and application count rather than per seat.

// price-band$499/USER/YR// verified 2026-09-23

// faq

FAQ

How much does Burp Suite Professional cost in 2026?
$499 per user per year, published on portswigger.net/burp/pro. PortSwigger raised the price from $449 to $499 in a global increase effective 6 January 2026. The order form lists the GBP equivalent as 419 per user per year, with US Dollar, Euro and British Pound all selectable, so the currency you buy in changes the number but not the model. There is no cheaper monthly plan; the only published lever is term length, with 3-year and 10-year options offered as 'predictable pricing when you lock in for longer', though PortSwigger does not publish the discount those carry.
Is Burp Suite Professional priced per user or per company?
Per user, and PortSwigger spells it out on the order form: 'Everyone who uses Burp Suite Professional needs to have a subscription. You cannot share a single Burp Suite Professional subscription between multiple users, even if only one person uses it at a time.' A team of five costs 5 x $499 = $2,495 per year. Licences are named-user subscriptions, not floating or per-company.
What is the difference between Burp Suite Professional and Community?
Community Edition is free but ships only the manual tools (proxy, Repeater, Decoder and a rate-limited Intruder) with no automated vulnerability scanner. Professional adds the automated scanner, unthrottled Intruder, saved projects, the BApp store and Burp AI features. If you need automated web scanning, you need Professional.
Is Burp Suite Professional the same as Burp Suite Enterprise?
No. Professional is a per-seat desktop tool for manual pen-testers at a published $499/user/year. Burp Suite Enterprise, rebranded Burp Suite DAST, is the automated, CI/CD-integrated, multi-user scanner sold quote-only after PortSwigger withdrew its former published tiers. They are separate products with separate pricing.
Does a Burp Suite Professional licence include Burp AI?
No. A Pro licence is the entry requirement (you cannot even buy AI credits without one) but Burp AI is metered separately and PortSwigger publishes no price for it. You either buy self-serve credit packs, which expire 12 months after purchase and are tied to one user with no pooling across a team, or add a Burp AI Subscription to the Pro licence, priced annually by team seat requirements on request. Budget Burp AI as a second line item, not as something the $499 covers.
Does Burp Suite Professional produce PCI ASV evidence?
No. PortSwigger is not on the PCI SSC list of Approved Scanning Vendors, so Burp cannot deliver the attested quarterly external ASV scan required by PCI DSS 11.3.2. Its findings can feed a PCI evidence pack, but the ASV scan itself must come from a listed ASV such as Qualys, Tenable or Rapid7.