I would like to know if nowadays (2021) the license of Burp Suite Pro is worth the cost. Is it a good option to use OWASP Zap instead for testing security in web applications?
Yes OWASP ZAP is a good option as it's an open source so always preferred but Burp Suite Pro will give you more options, its one of the best tool to have for pentesters so defo worth it.
@VishalDhamke Thanks for your reply, a personal opinion is always useful.
First things first both are having their own merits, however in my personal experience ZAP can replace your burpsuite for sure considering the License. Also as the latest ZAP versions are covering more advanced techniques and spidering patterns with lots of options in it, it is worth considering ZAP. However remember that burpsuite from latest versions with inbuilt chromium and it's emerging plugin support (Installable jars) you can use burp to the fullest and you can keep it as a swiss knife for your web and app pentesting. Couple of extensions in burp pro are interesting especially the race condition one. I always prefer using Burp and at instances I go with ZAP.
@Avinash-Kumar Thanks for your reply, a lot of info to make a decision.
What do you like most about PortSwigger Burp Suite Professional?
Thanks for sharing your thoughts with the community!
There are many cybersecurity tools available, but some aren't doing the job that they should be doing.
What are some of the threats that may be associated with using 'fake' cybersecurity tools?
What can people do to ensure that they're using a tool that actually does what it says it does?