Number of Seats/Users: PortSwigger offers discounts based on the number of users or seats. A higher volume typically leads to a better discount structure, especially for enterprise-level usage.

Commitment to a Long-Term Contract: Discounts are often provided to companies that commit to using the service for a longer period (e.g., 1-year or 3-year contracts). A longer commitment shows PortSwigger that the company is serious and willing to invest in the platform long-term.

No Active Discounts: Companies that are not already receiving other active discounts may have a better chance of qualifying for additional discounts from PortSwigger. PortSwigger reserves discounts for new customers or those not currently under promotional pricing.

Volume or Usage Commitment: PortSwigger offers discounts if you agree to a minimum amount of usage or transaction volume. This could be based on data storage, transactions, or other metrics tied to how much you will use the platform.

Enterprise-Level Negotiation: Companies that qualify as “enterprise” due to their size or complexity (e.g., having large teams, multiple departments, or geographical presence) may be eligible for additional discounts from PortSwigger. Such companies are often in a position to negotiate for better pricing.

Early Renewal or Prepayment: PortSwigger often offers discounts if you renew early or prepay for the entire contract period. This is a common approach to securing a lower price.

Here at Spendbase, our internal data shows that PortSwigger’s Burp Suite is seen as a “must‑have” for web app security teams, but it comes with a few consistent trade‑offs around price, skills, and usability.

From what our Spendbase clients share, the strongest value drivers are:

• Deep functionality for web app pentesting (proxy, repeater, intruder, spider, active scan)
• Flexible mix of automated and manual testing
• Very strong ecosystem: extensions, add‑ons, and the Web Security Academy
• Low false positives compared to many competing scanners
• Runs on a wide range of systems and is considered very stable

In plain terms: Burp Suite is often described as the “Swiss Army knife” or “machine gun” of web testing. Security analysts, bug bounty hunters, and pentesters rely on it daily.

However, our internal feedback data also flags some consistent friction points:

1) Pricing and editions
– Pro and Enterprise are often called “expensive,” especially for individuals or small teams.
– Many Spendbase clients try to stay on Community edition, but then feel limited by missing features (automation, saving projects, best add‑ons).

2) Learning curve and skills
– The tool is not “point and shoot.”
– New users often feel overwhelmed by the number of features and the lack of structured, official beginner content.
– Several clients say you need “pro‑level” skills to really unlock the value.

3) UI / UX and usability
– Interface is frequently described as outdated, cluttered, or not very intuitive.
– Important options can feel buried; large sitemaps and source views can become messy.
– Some minor graphical glitches and proxy setup quirks are mentioned.

4) Performance and scans
– Automated scans can be resource‑intensive.
– Some false positives still appear, especially on active scans, so manual validation is required.

5) Platform & integration quirks
– Occasional issues with browser proxy setup, certificates, rendering tools, and WebSockets.

From a Spendbase discount perspective, this all points to a clear pattern: Burp Suite delivers very high technical value for teams that truly use its advanced capabilities. The main optimization levers we help clients with are:

• Choosing the right edition per user profile (power users vs occasional testers)
• Avoiding over‑licensing where Community is enough
• Negotiating multi‑seat and long‑term discounts to offset the “expensive but essential” perception.