PortSwigger Reviews, Ratings & Features 2026 | Gartner Peer Insights

Gartner defines adversarial exposure validation (AEV) as technologies that deliver consistent, continuous and automated evidence of the feasibility of an attack. These technologies confirm how potential attack techniques would successfully exploit an organization and circumvent prevention and detection security controls. They achieve this by performing attack scenarios and modeling or measuring the outcome to prove the existence and exploitability of exposures. AEV is generally delivered as a SaaS solution with or without on-premises agents. AEV as a market category replaces breach and attack simulation (BAS) and automated penetration testing and red teaming technology from the 2023 Gartner Hype Cycle (Hype Cycle for Security Operations, 2023). AEV technologies provide automated execution of both simplified and/or extensible attack scenarios. Results data from an executed attack scenario is used for various outcomes, such as:
validating a theoretical exposure as real,
automating frequent controls testing,
improving preventive security posture
or improving detection and response capabilities.

Active

Find the top Adversarial Exposure Validation with Gartner. Compare and filter by verified product reviews and choose the software that’s right for your organization.

Adversarial Exposure Validation

Burp Suite Professional

PortSwigger

It Security & Risk Management Associate

I been using burp suite professional only for the web application security testing .The proxy is useful for capture and modify the request in the real time. the feature i found it very helpful is that the automated scanner, it always identify the  vunerability like SQL injection and XSS. It allows more manual testing, especially for the payload based attacks.

50M - 250M USD

<50M USD

250M - 500M USD

500M - 1B USD

1B - 3B USD

3B - 10B USD

10B - 30B USD

30B + USD

Gov't/PS/ED <5,000 Employees

Gov't/PS/ED 5,000 - 50,000 Employees

Associate Researcher

Overall experience is good, but the functionality for testing needs improvement at many ends. During our project, many of the faults during penetration testing failed to be detected. Rest still I feel its a reliable tool. 

Assistance Manager, It Security And Risk

versatile testing tool providing comprehensive suite catering to wide range of security testing needs
regular updates provided by portswigger ensure that application stays up to date
burpsuite boast advance scanning engine that can detect wide range of web app vulnerabilities
Automation of many routine task thus improving efficiency

burp suite is highly versatile tool which require new user to invest significant time in tutorials manuals or training material
burp suite is resource intensive and can put strain on system performance



Rapid7

Invicti

Qualys

Netsparker--

Other...

Checkmarx

Pentest-Tools.com

Veracode

OpenText (Micro Focus)

ERPScan

LevelBlue

Contrast Security

GitLab

Black Duck

Tenable

AppCheck

The Open Web Application Security Project (OWASP)

NetSPI

GitHub

Data Theorem

NTT Application Security

GuidePoint Security

Symantec (Appthority)

N-Stalker

Cobalt

Indusface

ImmuniWeb

Onapsis

PortSwigger is a company that specializes in developing software tools used for security testing of web applications. The company's primary focus lies in the web security industry, and it's known for the creation of the Burp Suite, a tool commonly utilized by professionals in this field. The company is based near Manchester, UK and has a steady team of Java and .NET developers who contribute to maintaining and advancing the capabilities of the tools developed by the company.

PortSwigger is a global leader in the creation of software tools for security testing of web applications. For over a decade, we have worked at the cutting edge of the web security industry, and our software is well established as the de facto standard toolkit used by web security professionals.

The team behind Burp Suite is growing steadily, and we are always recruiting for outstanding Java and .NET developers to join our ultra-agile team near Manchester, UK. If you are the best software engineer at your current employer and looking for a challenge, please get in touch: https://portswigger.net/careers

Reviews

Ratings Overview

Overall experience with

Favorable Review

Advanced Web Vulnerability Scanning and Automation Improves Security Workflows

Critical Review

Reliable testing and report

Likes and dislikes about

likes

dislikes