Classic - Overview

How does it work?

When you subscribe using the Classic option, you start by defining how many applications you would expect to scan simultaneously within any period (concurrent scans). This number is generally selected upfront based on the predicted requirement and can be adjusted as needed throughout your contract.

As with every Burp Suite Enterprise Edition subscription, there's no limit to the number of domain names/URLs you can scan or the number of users you can add. The scan results you produce all come with actionable remediation advice - so you don't need to be a security expert to fix the vulnerabilities you find.

If you have any questions about Enterprise Edition's Classic model, our team are happy to help. Get in touch with them at hello@portswigger.net.

An asset to any Application Security team

Our longest-standing subscription option has been a staple for many organizations since the release of Burp Suite Enterprise Edition. Classic is usually the best option if you have regular scanning requirements and have a clear view of how many applications and how often you need to scan them.

PortSwigger hosted - Classic subscription price breakdown

To demonstrate how Classic can save you money on your Burp Suite Enterprise Edition subscription, we've created an illustrative example. All the prices referred to here are available on Burp Suite Enterprise Edition's Pricing page.

Imagine that your organization has twenty critical web applications that it needs to scan to ensure application security visibility. Generally, organizations using Burp Suite would scan any critical web applications at multiple times per month. Here, we'll take this as a benchmark.

For the sake of this example, let's assume that all of your web applications are reasonably complex, and that it takes Burp Suite Enterprise Edition two hours to perform a deep scan of each one.