Burp Suite
Read the same way at every company size.
The standing depends on who is buying. Every model is asked the same questions for each company size.
OWASP ZAP is first at 51%.
Invicti is first at 33%. 0 of 14 models made it the first choice when asked directly.
Invicti is first at 58%.
Why models recommend it
“Burp Suite is widely considered the industry standard for web application security.”GLM 4.7 FlashX · Comparative question · first choice
“Need deep manual testing plus automation: Choose Burp Suite.”Perplexity Sonar · Comparative question · first choice
“Choose Burp Suite DAST/Enterprise if you're more in the manual-testing / pentest-heavy world”GPT-5.4 mini · Direct question · alternative
“Burp Suite Professional | $475/user/year | Advanced teams needing more capabilities”MiniMax M2.5 · Budget-constrained question · alternative
What gives them pause
“Avoid these if you are mid-market: Burp Suite Professional”Qwen 3.7 Flash · Direct question · warning
“its free edition lacks some DAST automation features and can be less efficient; it's fine for manual testing but less ideal for CI/CD pipelines”GLM 4.7 FlashX · Negative question · warning
“very capable, but you should be cautious about scan settings and false-positive/false-negative tradeoffs”GPT-5.4 mini · Negative question · warning
“at ~$499/user/year is the industry standard, but it's hard to justify when ZAP covers most needs for free”DeepSeek V4 Flash · Budget-constrained question · warning
Also on the shortlist
The products named in the same answers as Burp Suite, over the 118 answers that named it, and how often each was the first choice instead.
| Product | Named together | Picked instead | |
|---|---|---|---|
| 89 | 34 | View → | |
| 70 | 28 | View → | |
| 59 | 9 | View → | |
| 45 | 5 | View → | |
| 36 | 1 | View → | |
| 28 | 1 | View → | |
| 27 | 1 | View → | |
| 27 | 0 | View → | |
| 24 | 5 | View → | |
| 21 | 1 | View → |
What the models named instead of Burp Suite →
A side-by-side page exists where both products are among a category's top eight.
How this is measured
Fourteen AI models from 12 labs are asked the same buying questions six ways, for three company sizes. Standings refresh every edition.
Gane sells AI visibility software. No company can pay to change a result.
Read the method →Sources returned with these answers
Fourteen of the fourteen models returned a source list in this edition: five return the pages they cited and nine the search results they consulted. These counts come from 101 of the 118 answers that named Burp Suite and are not a share of its labels.
Domains cited
No domain is on file for Burp Suite, so its own site is not marked. Twenty-five were to the publisher's own pages (the Gane Index), which the models cite like any other source; they are not counted as a third party.
Pages cited
Pages are listed as the models cited them.
By model
| Model | First choice | Alternative | Mention | Warning | Labels |
|---|---|---|---|---|---|
| Claude Haiku 4.5 | 0 | 0 | 0 | 0 | 0 |
| GPT-5.4 mini | 0 | 3 | 0 | 1 | 4 |
| Gemini 3.5 Flash | 0 | 3 | 2 | 1 | 6 |
| Perplexity Sonar | 1 | 0 | 0 | 1 | 2 |
| Grok 4.20 | 0 | 3 | 0 | 1 | 4 |
| Mistral Small | 0 | 0 | 1 | 0 | 1 |
| DeepSeek V4 Flash | 0 | 2 | 2 | 2 | 6 |
| Llama 4 Maverick | 0 | 1 | 1 | 0 | 2 |
| Qwen 3.7 Flash | 0 | 1 | 1 | 2 | 4 |
| Kimi K2 | 0 | 4 | 0 | 0 | 4 |
| GLM 4.7 FlashX | 1 | 2 | 1 | 2 | 6 |
| MiniMax M2.5 | 0 | 3 | 0 | 0 | 3 |
| GPT-6 Luna | 0 | 0 | 0 | 0 | 0 |
| Muse Glimmer 30B | 0 | 0 | 0 | 1 | 1 |