The Free version was my only tool for 1-2 years, and now it’s the Pro version.

I pay for it to support the developers, because it only costs 250USD or something like that per year, which you should be able to afford whenever you start making money of bug bounty programs. In my case, I use the Repeater and the Proxy 99% of the time, and when I use the other features I usually end with nothing useful. If you are just starting out with bug bounty programs and no making good money, I don’t see the point to purchase it.

If the answer is “no” or “I don’t know”, then don’t purchase it. Hi you this question: “do I need the features of the Pro version?”. But in the last year Zap Proxy has enter a state where is almost as good as Burp, and is open source(no blackbox and software you have to blindly trust) and is a huge community of developers that makes the project move at a fast pace with new modules/add-ons and options… It does have a learning curve, most things are accomplished in a different way that you do with Burp also some utilities are better and some are still behind Burp but since is open source and the development is super fast I am sure it will surpass Burp in no time… I will recommend that you switch to Zaproxy if a small learning curve does not scares you, and you value running open source applications, and with it you will save some money, you can always after some time of use, donate to the OWASP project as a thank you for creating such tools that benefit the whole Information security community, that are vendor neutral and non-bias.Ĭloud Infrastructure and Security Engineer at Bugcrowd Inc

Hello I was a Burp user for a long time, mostly because there was no other option that could achieve the same results.

Burppro