Burp Suite DAST vs PlexTrac
Burp Suite DAST
portswigger.netPlexTrac
plextrac.comSide by side
| Figure | Burp Suite DAST | PlexTrac |
|---|---|---|
| Price from | — | — |
| Free plan | — | — |
| Free trial | Yes | — |
| Open source | — | — |
| Web | Yes | Yes |
| Windows | Yes | — |
| Linux | Yes | — |
| API | Yes | Yes |
| Self-hosted | Yes | Yes |
| Plans published | 1 | 6 |
| Spec score · Penetration Testing Software | 8.7 (#3) | 6.8 (#29) |
| Deployment | Burp Suite DAST is available as managed cloud service or self-hosted software, including Windows and Linux installers and a Helm deployment for Kubernetes. | PlexTrac offers multitenant cloud SaaS, private hosted instances, and customer-hosted on-premises deployment using Docker containers. |
| Headquarters | Knutsford, Cheshire, UK | Boise, Idaho, USA |
| Integrations | Named CI/CD integrations include Jenkins, GitHub Actions, GitLab CI, Azure DevOps, Bitbucket Pipelines, CircleCI, and TeamCity; findings can be delivered to Jira, ServiceNow, Azure Boards, and GitHub Issues. | The integrations directory lists tools including CrowdStrike Falcon Spotlight, Microsoft Defender, Snyk, Qualys, Nessus, and ServiceNow, and notes CSV import for unlisted integrations. |
| Pricing availability | The official pricing page displays a plans heading but no plan prices or limits in its readable page content; the product page directs buyers to request a demo or talk to sales. | The pricing page provides package descriptions and a Get Pricing request rather than published dollar amounts. |
| Purpose | Burp Suite DAST is an automated dynamic web vulnerability scanner built on the scanning engine used in Burp Suite Professional. | PlexTrac is a penetration-test reporting and exposure-assessment platform that consolidates security findings, prioritizes risk, and supports remediation workflows. |
| Support | The product page describes technical support from specialists, SLA-backed support for enterprise, onboarding, and a named solutions architect for the enterprise tier. | The contact page lists support hours as Monday through Friday, except holidays, 6 a.m. to 6 p.m. MST. |
Plans
PlexTrac
- Enterprise CorePriced on request
- Enterprise EssentialPriced on request
- Enterprise PremiumPriced on request
- Service Provider CorePriced on request
- Service Provider EssentialPriced on request
- Service Provider PremiumPriced on request
In their own words
Burp Suite DAST
Burp Suite DAST is an automated dynamic scanner for web vulnerabilities, built on the scanning engine used in Burp Suite Professional. Its Chromium-based crawler can handle JavaScript single-page applications, dynamic forms, GraphQL endpoints, and asynchronous loads, while crawling and auditing can run in parallel. Session-aware scans maintain authenticated state using username-password pairs or recorded login sequences. The scanner covers APIs described by Postman Collections, OpenAPI, SOAP, and GraphQL, with native support for several authentication methods. Teams can schedule portfolio scans from a dashboard or run them in CI pipelines, including on pull requests and merges. Deployment options include managed cloud and self-hosted software for Windows and Linux, plus Helm deployment for Kubernetes; self-hosted deployments can operate in air-gapped environments. Access controls include role-based permissions, site groups, audit trails, SAML single sign-on, and group-locked scan policies. Findings include captured requests and confirming responses. Pricing depends on the portfolio and requires contacting PortSwigger; a guided proof-of-concept trial follows a tailored demo and discovery call.