We are increasing prices for Burp Suite Professional and Burp Suite Enterprise Edition, due to a significant increase in costs caused by global inflation.

The price of an annual Burp Suite Professional subscription for one individual user will increase from $399 to $449 - the first rise in price since 2018.

The price of Burp Suite Enterprise Edition subscriptions will increase as follows:

• Burp Suite Enterprise Edition - including one concurrent scan - will increase from $4,999 to $5,999.
• Every additional concurrent scan will increase from $499 to $599.

*Prices in EUR and GBP will be increased accordingly, while also being adjusted to reflect changes in USD exchange rates.

The price increase will take effect on 12 September, although we will honour current prices for 90 days on any formal quotation taken before 12 September.

Delivering the best web security products

Financial returns are not our ultimate measure of success, and ideally, we wouldn't need to increase prices. However, building Burp Suite requires hiring and equipping world-class engineers and web security experts.

Our commitment to you, and our overall mission as a business, is to continue investing in delivering the capabilities needed to secure the web and speed up software delivery. This includes continuing to build on our success with the following products:

• Burp Suite Professional - enabling the world's penetration testers to find more vulnerabilities, faster.
• Burp Suite Enterprise Edition - ensuring enterprises can scan all of their applications for security issues, with no URL or user limits.
• Burp Scanner - continually improving Burp Scanner's ability to find critical web security vulnerabilities that even an expert manual tester might miss.
• Web Security Academy - producing the definitive resource for knowing how to find and exploit security vulnerabilities. Always free - now containing over 200 interactive labs.
• PortSwigger Research - leading the industry, and unearthing new vulnerabilities and attack techniques such as HTTP desync attacks.