Open Source Burp Suite AlternativesTop Vulnerability Scanners and other similar apps like Burp Suite

The best open source alternative to Burp Suite is mitmproxy. If that doesn't suit you, our users have ranked more than 25 alternatives to Burp Suite and seven of them is open source so hopefully you can find a suitable replacement. Other interesting open source alternatives to Burp Suite are OWASP Zed Attack Proxy (ZAP), SiteOne Crawler, HTTP Toolkit and w3af.

filter to find the best alternatives

Burp Suite alternatives are mainly Vulnerability Scanners but may also be Penetration Testing Tools or HTTP(S) Debuggers. Filter by these or use the filter bar below if you want a narrower list of alternatives or looking for a specific functionality of Burp Suite.

Burp Suite

Vulnerability Scanner
Freemium • Proprietary

Burp Suite is an integrated platform for performing security testing of web applications. Its various tools work seamlessly together to support the entire testing process, from initial mapping and analysis of an...

More about Burp Suite

Burp Suite alternatives page was last updated Aug 19, 2024

mitmproxy
mitmproxy is an SSL-capable man-in-the-middle proxy for HTTP. It provides a console interface that allows traffic flows to be inspected and edited on the fly. It also features mitmdump, a commandline tool that provides a tcpdump-like interface for saving, viewing and...
17 mitmproxy alternatives
License model
- Free • Open Source
Application types
- HTTP(S) Debugger
- Web Debugger
Platforms
- Mac
- Windows
- Linux
mitmproxy Features
1. Web page Debugging
2. HTTP(S) Debugging
3. SSL
4. Debugging
5. Support for scripting
6. Intercepting HTTP calls
Show all NaN mitmproxy features ▾
mitmproxy VS Burp Suite
Is mitmproxy a good alternative to Burp Suite?
- Almost everyone thinks mitmproxy is a great Burp Suite alternative.
- mitmproxy is the most popular Windows, Mac & Linux alternative to Burp Suite.
- mitmproxy is the most popular Open Source & free alternative to Burp Suite.
- mitmproxy is Free and Open SourceBurp Suite is Freemium and Proprietary

OWASP Zed Attack Proxy (ZAP)
The Zed Attack Proxy (ZAP) is an easy to use integrated penetration testing tool for finding vulnerabilities in web applications.
30 OWASP Zed Attack Proxy (ZAP) alternatives
License model
- Free • Open Source
Application types
- Penetration Testing Tool
- Web Debugger
Platforms
- Mac
- Windows
- Linux
OWASP Zed Attack Proxy (ZAP) Features
Proxy support
Show all NaN OWASP Zed Attack Proxy (ZAP) features ▾
+1
OWASP Zed Attack Proxy (ZAP) VS Burp Suite
Is this a good alternative to Burp Suite?

SiteOne Crawler
A free in-depth website analyzer providing audits of security, performance, SEO, accessibility and other technical aspects. Available as a desktop application for Windows/macOS/Linux and as a CLI tool for advanced users and CI/CD processes. It also includes an offline web page exporter.
22 SiteOne Crawler alternatives
License model
- Free • Open Source
Application types
- SEO Tool
- Website Downloader
Platforms
- Mac
- Windows
- Linux
+9
Top SiteOne Crawler Features
1. No Coding Required
2. Ad-free
3. Electron based
4. SEO Audit
5. Miror website locally
6. Crawler
7. Dark Mode
8. Command line interface
9. Performance analysis
10. Accessibility Testing
11. Multiplatform
12. Graphical User Interface
Show all NaN SiteOne Crawler features ▾
SiteOne Crawler VS Burp Suite
Is SiteOne Crawler a good alternative to Burp Suite?

HTTP Toolkit
HTTP Toolkit is a beautiful, cross-platform & open-source HTTP(S) debugging proxy, analyzer & client, with built-in support for modern tools and automatic interception for clients from Docker to Android to iOS.
47 HTTP Toolkit alternatives
License model
- Freemium • Open Source
Application types
- HTTP Client
- API Client
Platforms
- Mac
- Windows
- Linux
- Online
+3
Top HTTP Toolkit Features
1. HTTP(S) Debugging
2. HTTP mocking
3. One click interception
4. Debugging
5. Performance analysis
6. Built in docs
7. Ad-free
8. Portable
9. Themes
10. OpenAPI integration
11. Requests monitoring
Show all NaN HTTP Toolkit features ▾
HTTP Toolkit VS Burp Suite
Is HTTP Toolkit a good alternative to Burp Suite?
- HTTP Toolkit is the most popular Web-based alternative to Burp Suite.
- HTTP Toolkit is Freemium and Open SourceBurp Suite is Freemium and Proprietary

w3af
w3af is a Web Application Attack and Audit Framework.
21 w3af alternatives
License model
- Free • Open Source
Platforms
- Windows
- Linux
w3af VS Burp Suite
Is w3af a good alternative to Burp Suite?

nuclei
Nuclei is used to send requests across targets based on a template, leading to zero false positives and providing fast scanning on a large number of hosts. Nuclei offers scanning for a variety of protocols, including TCP, DNS, HTTP, SSL, File, Whois, Websocket, Headless etc.
21 nuclei alternatives
License model
- Free • Open Source
Application type
- Vulnerability Scanner
Platforms
- Mac
- Windows
- Linux
nuclei Features
Vulnerability Assessment
Show all NaN nuclei features ▾
nuclei VS Burp Suite
Is nuclei a good alternative to Burp Suite?

Tamper Data
Firefox add-on that lets you change headers and request parameters before they're sent to the server. Unlike proxy request modifiers, it's integrated into the browser, so it has no problem with HTTPS connections, client authentication certificates, or other features that...
8 Tamper Data alternatives
License model
- Free • Open Source
Application type
- Penetration Testing Tool
Platforms
- Mac
- Windows
- Linux
- Firefox
Tamper Data Features
Legacy Firefox Addon
Show all NaN Tamper Data features ▾
Discontinued
The extension is no longer developed since 2010 and it's not compatible with Firefox 57 and later. It still works on XUL-based Firefox forks like Waterfox and Pale Moon

Tamper Data VS Burp Suite
Is Tamper Data a good alternative to Burp Suite?