Compare products
Put two or three cybersecurity products side by side and see how they differ on deployment, pricing, features, integrations and compliance.
| Product | StackHawk DAST by StackHawk View product | Burp Suite Professional by PortSwigger View product |
|---|---|---|
| Overview | ||
| What it is | Get the facts on StackHawk DAST: developer-first DAST and automated pull request testing. Built for DevSecOps. Compare it with other DAST options before you decide. | Get the facts on Burp Suite Professional: Burp Repeater. Built for ethical hacking. Compare it with other Penetration Testing options before you decide. |
| Product type | CI/CD Native Dynamic Application Security Testing Platform | Web Penetration Testing & DAST Software |
| Best for | DevSecOps, Software Engineering, Financial Services, Technology | Cross-industry, Cybersecurity Consulting, Penetration Testing, Financial Services, Technology |
| Pricing | ||
| Pricing model | Contact Vendor | Contact Vendor |
| Free trial | Free trial: yes | Free trial: yes |
| Deployment | ||
| Deployment options | SaaSCloud | Cloud |
| Deployment details | Cloud SaaS; Local CLI Runner; Cloud SaaS Controller + Containerized HawkScan CLI | Desktop Software; Desktop application (Windows, macOS, Linux) |
| Data residency | United States; Global Cloud | Local workstation |
| Key features | ||
| What it offers |
|
|
| Platform & access | ||
| API access | API access: yes | API access: yes |
| Single sign-on (SSO) | SSO: yes | SSO: no |
| Role-based access (RBAC) | RBAC: yes | RBAC: no |
| Multi-tenant | Multi-tenant: yes | Multi-tenant: no |
| Mobile app | Mobile app: no | Mobile app: no |
| Supported platforms | Web ApplicationsMicroservicesCI/CD Runners | Web applicationsAPIsWebSocketsMobile backend services |
| Compliance | SOC 2 Type IIGDPR | PCI DSSOWASP Top 10NIST SP 800-115 |
| Integrations & coverage | ||
| Integrations | GitHub ActionsGitLab CICircleCIJenkinsAzure DevOpsJira | BApp Store pluginscustom Python/Java extensionsChromium browserGit |
| Industries | DevSecOpsSoftware EngineeringFinancial ServicesTechnology | Cross-industryCybersecurity ConsultingPenetration TestingFinancial ServicesTechnology |
| Regions | Global | Global |
| Vendor | ||
| Company | StackHawk | PortSwigger |
| Headquarters | Denver, Colorado, USA | Knutsford, United Kingdom |
| Company size | 51-200 | 201-500 |
| Founded | 2019 | 2008 |
Overview
What it is
StackHawk DAST
Get the facts on StackHawk DAST: developer-first DAST and automated pull request testing. Built for DevSecOps. Compare it with other DAST options before you decide.Burp Suite Professional
Get the facts on Burp Suite Professional: Burp Repeater. Built for ethical hacking. Compare it with other Penetration Testing options before you decide.Product type
StackHawk DAST
CI/CD Native Dynamic Application Security Testing PlatformBurp Suite Professional
Web Penetration Testing & DAST SoftwareBest for
StackHawk DAST
DevSecOps, Software Engineering, Financial Services, TechnologyBurp Suite Professional
Cross-industry, Cybersecurity Consulting, Penetration Testing, Financial Services, TechnologyPricing
Pricing model
StackHawk DAST
Contact VendorBurp Suite Professional
Contact VendorFree trial
StackHawk DAST
Free trial: yesBurp Suite Professional
Free trial: yesDeployment
Deployment options
StackHawk DAST
Burp Suite Professional
Deployment details
StackHawk DAST
Cloud SaaS; Local CLI Runner; Cloud SaaS Controller + Containerized HawkScan CLIBurp Suite Professional
Desktop Software; Desktop application (Windows, macOS, Linux)Data residency
StackHawk DAST
United States; Global CloudBurp Suite Professional
Local workstationKey features
What it offers
StackHawk DAST
- Developer-first DAST
- Automated pull request testing
- Authenticated session fuzzing
- Reproducible curl commands
- CI/CD security quality gates
- Developer-driven dynamic security testing
- Pull-request vulnerability triage
- DevSecOps
Burp Suite Professional
- Full-featured Burp Scanner
- Burp Intruder parameter fuzzing
- Burp Repeater
- Burp Collaborator
- Burp Organizer
- BApp Store extensions
- WebSocket inspection
- Automated remediation advisories
Platform & access
API access
StackHawk DAST
API access: yesBurp Suite Professional
API access: yesSingle sign-on (SSO)
StackHawk DAST
SSO: yesBurp Suite Professional
SSO: noRole-based access (RBAC)
StackHawk DAST
RBAC: yesBurp Suite Professional
RBAC: noMulti-tenant
StackHawk DAST
Multi-tenant: yesBurp Suite Professional
Multi-tenant: noMobile app
StackHawk DAST
Mobile app: noBurp Suite Professional
Mobile app: noSupported platforms
StackHawk DAST
Burp Suite Professional
Compliance
StackHawk DAST
Burp Suite Professional
Integrations & coverage
Integrations
StackHawk DAST
Burp Suite Professional
Industries
StackHawk DAST
Burp Suite Professional
Regions
StackHawk DAST
Burp Suite Professional
Vendor
Company
StackHawk DAST
StackHawkBurp Suite Professional
PortSwiggerHeadquarters
StackHawk DAST
Denver, Colorado, USABurp Suite Professional
Knutsford, United KingdomCompany size
StackHawk DAST
51-200Burp Suite Professional
201-500Founded
StackHawk DAST
2019Burp Suite Professional
2008