PortSwigger
Burp Suite is a comprehensive toolkit for web application security testing, offering a range of products and solutions for identifying vulnerabilities, improving security posture, and enabling DevSecOps. The platform provides a dynamic web vulnerability scanner, manual tools for web security testing, and a web application security scanning solution for CI/CD. Additionally, Burp Suite offers a free online training center, the Web Security Academy, which provides interactive labs and learning materials for web application security. The platform's products include Burp Suite Enterprise Edition, Burp Suite Professional, and Burp Suite Community Edition, each catering to different needs and use cases. The solutions offered by Burp Suite cover application security testing, penetration testing, automated scanning, bug bounty hunting, and compliance, among others. The Web Security Academy provides a flexible learning path with interactive labs and progress-tracking, produced by a world-class team of experts in web application security.
FEATURES
ALTERNATIVES
A web application firewall and API security platform that combines API discovery, runtime protection, vulnerability testing, and security posture management.
Real-time, eBPF-based Security Observability and Runtime Enforcement component
Goof is a vulnerable Node.js demo application that includes a series of vulnerabilities and exploits
A Windows Kernel driver intentionally vulnerable to help improve skills in kernel-level exploitation.
ConDroid performs concolic execution of Android apps to observe 'interesting' behavior in dynamic analysis.
A third-party Nginx module that prevents common web attacks by reading a small subset of simple rules containing 99% of known patterns involved in website vulnerabilities.
A web-based tool for instrumenting and analyzing Android applications using Flask, Jinja, and Redis.
PINNED
InfoSecHired
An AI-powered career platform that automates the creation of cybersecurity job application materials and provides company-specific insights for job seekers.
Fabric Platform by BlackStork
Fabric Platform is a cybersecurity reporting solution that automates and standardizes report generation, offering a private-cloud platform, open-source tools, and community-supported templates.
Mandos Brief Newsletter
Stay ahead in cybersecurity. Get the week's top cybersecurity news and insights in 8 minutes or less.
System Two Security
An AI-powered platform that automates threat hunting and analysis by processing cyber threat intelligence and generating customized hunt packages for SOC teams.
Aikido Security
Aikido is an all-in-one security platform that combines multiple security scanning and management functions for cloud-native applications and infrastructure.
Permiso
Permiso is an Identity Threat Detection and Response platform that provides comprehensive visibility and protection for identities across multiple cloud environments.
Wiz
Wiz Cloud Security Platform is a cloud-native security platform that enables security, dev, and devops to work together in a self-service model, detecting and preventing cloud security threats in real-time.
Adversa AI
Adversa AI is a cybersecurity company that provides solutions for securing and hardening machine learning, artificial intelligence, and large language models against adversarial attacks, privacy issues, and safety incidents across various industries.