Compare products
Put two or three cybersecurity products side by side and see how they differ on deployment, pricing, features, integrations and compliance.
| Product | Burp Scanner by PortSwigger View product | Qualys Web Application Scanning by Qualys View product |
|---|---|---|
| Overview | ||
| What it is | Burp Scanner, from PortSwigger, provides API scanning and authenticated crawling. Common uses: automated web scanning. Check deployment options and top DAST competitors. | Evaluating Qualys Web Application Scanning? See how this Application Security Testing tool handles DAST crawling, where it fits best and which alternatives to compare. |
| Product type | Dynamic Application Security Testing (DAST) Engine | Dynamic Application Security Testing |
| Best for | Technology, Financial Services, E-commerce, Healthcare, Retail | Cross-industry, E-commerce, Banking, Software |
| Pricing | ||
| Pricing model | Contact Vendor | Contact Vendor |
| Free trial | Free trial: yes | Free trial: yes |
| Deployment | ||
| Deployment options | CloudHybridOn-Premise | SaaSCloud |
| Deployment details | Cloud; On-premises; Hybrid; Managed cloud engine; Private cloud agent; Self-hosted container | Cloud; Qualys Cloud Platform SaaS; Internal virtual scanner |
| Data residency | Customer environment / Cloud region dependent | Global; US; EU; APAC |
| Key features | ||
| What it offers |
|
|
| Platform & access | ||
| API access | API access: yes | API access: yes |
| Single sign-on (SSO) | SSO: yes | SSO: yes |
| Role-based access (RBAC) | RBAC: yes | RBAC: yes |
| Multi-tenant | Multi-tenant: yes | Multi-tenant: yes |
| Mobile app | Mobile app: no | Mobile app: no |
| Supported platforms | Web applicationsREST APIsSOAP APIsMicroservices | Web AppsREST APIsCloud Workloads |
| Compliance | OWASP Top 10PCI DSSISO 27001SOC 2 | OWASP Top 10PCI DSSHIPAASOC 2 |
| Integrations & coverage | ||
| Integrations | JenkinsGitLabGitHub ActionsTeamCityAzure DevOpsJiraREST API | JiraJenkinsGitLabAzure DevOpsServiceNow |
| Industries | TechnologyFinancial ServicesE-commerceHealthcareRetail | Cross-industryE-commerceBankingSoftware |
| Regions | Global | Global |
| Vendor | ||
| Company | PortSwigger | Qualys |
| Headquarters | Knutsford, United Kingdom | Foster City, California, USA |
| Company size | 201-500 | 2,000+ |
| Founded | 2008 | 1999 |
Overview
What it is
Burp Scanner
Burp Scanner, from PortSwigger, provides API scanning and authenticated crawling. Common uses: automated web scanning. Check deployment options and top DAST competitors.Qualys Web Application Scanning
Evaluating Qualys Web Application Scanning? See how this Application Security Testing tool handles DAST crawling, where it fits best and which alternatives to compare.Product type
Burp Scanner
Dynamic Application Security Testing (DAST) EngineQualys Web Application Scanning
Dynamic Application Security TestingBest for
Burp Scanner
Technology, Financial Services, E-commerce, Healthcare, RetailQualys Web Application Scanning
Cross-industry, E-commerce, Banking, SoftwarePricing
Pricing model
Burp Scanner
Contact VendorQualys Web Application Scanning
Contact VendorFree trial
Burp Scanner
Free trial: yesQualys Web Application Scanning
Free trial: yesDeployment
Deployment options
Burp Scanner
Qualys Web Application Scanning
Deployment details
Burp Scanner
Cloud; On-premises; Hybrid; Managed cloud engine; Private cloud agent; Self-hosted containerQualys Web Application Scanning
Cloud; Qualys Cloud Platform SaaS; Internal virtual scannerData residency
Burp Scanner
Customer environment / Cloud region dependentQualys Web Application Scanning
Global; US; EU; APACKey features
What it offers
Burp Scanner
- Automated web vulnerability scanning
- Embedded Chromium crawler
- OAST via Burp Collaborator
- API scanning
- Authenticated crawling
- Customized attack insertion points
- CI/CD integration
- Remediation advice
Qualys Web Application Scanning
- Automated web application scanning
- DAST crawling
- OWASP Top 10 detection
- REST API scanning
- False-positive filter
- Dynamic application testing
- OWASP flaw discovery
- DevSecOps CI/CD testing
Platform & access
API access
Burp Scanner
API access: yesQualys Web Application Scanning
API access: yesSingle sign-on (SSO)
Burp Scanner
SSO: yesQualys Web Application Scanning
SSO: yesRole-based access (RBAC)
Burp Scanner
RBAC: yesQualys Web Application Scanning
RBAC: yesMulti-tenant
Burp Scanner
Multi-tenant: yesQualys Web Application Scanning
Multi-tenant: yesMobile app
Burp Scanner
Mobile app: noQualys Web Application Scanning
Mobile app: noSupported platforms
Burp Scanner
Qualys Web Application Scanning
Compliance
Burp Scanner
Qualys Web Application Scanning
Integrations & coverage
Integrations
Burp Scanner
Qualys Web Application Scanning
Industries
Burp Scanner
Qualys Web Application Scanning
Regions
Burp Scanner
Qualys Web Application Scanning
Vendor
Company
Burp Scanner
PortSwiggerQualys Web Application Scanning
QualysHeadquarters
Burp Scanner
Knutsford, United KingdomQualys Web Application Scanning
Foster City, California, USACompany size
Burp Scanner
201-500Qualys Web Application Scanning
2,000+Founded
Burp Scanner
2008Qualys Web Application Scanning
1999