Dynamic web application scanning
Features of the two main web application scanners (community versions):
Feature | Burp Suite Community Edition |
OWASP ZAP | Burp Suite Pro |
---|---|---|---|
Web Application Scanning | Not Available | Available with basic security vulnerabilities |
Available with quality security vulnerabilities |
Intercepting Feature | Available | Available | Available |
Fuzzing Capabilities | Available | Available | Available |
Encoder and Decoder | Available | Not Available | Available |
Cost | Free | Free | Paid Subscription Advanced Functionality ($450 per year) |
Documentation | Extensive | Little | Extensive |
Spider | Available | Available | Available |
Updates | Available | Available | Available |
Extensions | Less Options | No provision for enhance functionality |
Available |
Coverage | Medium coverage | Less coverage | Extensive Coverage |
False Positive | Less | More | Less |
Session Token Entropy Analysis |
Available | Not Available | Available |
Comparison Feature | Available | Not Available | Available |