Zed Attack Proxy (ZAP) and Burp Suite: documented facts side by side
Both tools document security tests. 4 of 9 fields differ. The comparison lists facts from each tool's own pages and does not rate either tool.
Field by field
| Field | Zed Attack Proxy (ZAP) | Burp Suite | Status |
|---|---|---|---|
| Licence | open-source | freemium | differs |
| Hosting | self-hosted | cloud, self-hosted | differs |
| Test classes documented | Security tests | Security tests | same |
| Test languages | YAML | YAML | same |
| CI integrations named in docs | GitHub Actions | GitHub Actions, Jenkins, TeamCity | differs |
| Platforms | api, web | api, web | same |
| Published price | not published | not published | same |
| First release | not published | not published | same |
| Vendor or maintainer | Checkmarx | PortSwigger | differs |
Zed Attack Proxy (ZAP) facts with sources · Burp Suite facts with sources
Only on this page
Curated angle for this pair: licence and hosting.
The field with the largest difference is licence: Zed Attack Proxy (ZAP) lists open-source; Burp Suite lists freemium.
Questions
What is the difference between Zed Attack Proxy (ZAP) and Burp Suite?
The field with the largest difference is licence: Zed Attack Proxy (ZAP) lists open-source; Burp Suite lists freemium.
What is Zed Attack Proxy (ZAP), and what is Burp Suite?
Zed Attack Proxy (ZAP): open-source, documents security. Burp Suite: freemium, documents security.
Which test classes do Zed Attack Proxy (ZAP) and Burp Suite each document?
Zed Attack Proxy (ZAP): security tests. Burp Suite: security tests.
Are Zed Attack Proxy (ZAP) and Burp Suite free?
Zed Attack Proxy (ZAP): open-source; price not published. Burp Suite: freemium; price not published.
Are Zed Attack Proxy (ZAP) and Burp Suite open source or commercial?
Zed Attack Proxy (ZAP): open-source. Burp Suite: freemium.
What are the key differences between Zed Attack Proxy (ZAP) and Burp Suite in hosting and CI integrations?
Zed Attack Proxy (ZAP): hosting self-hosted; CI integrations GitHub Actions. Burp Suite: hosting self-hosted, cloud; CI integrations GitHub Actions, Jenkins, TeamCity.