Burp Suite helps you secure your web applications by finding the vulnerabilities they contain.

Our cutting-edge tools let you combine automated and manual techniques to make your security testing more effective and thorough than ever before.

Today we are pleased to announce our bug bounty program. This covers:

The program is managed on HackerOne, and all reports should be submitted through that platform.

This release adds various enhancements and fixes:

There is a new command-line option to launch Burp with a specified user configuration file.
A bug that was recently introduced that prevented license activation in headless mode has been fixed.
The Content Discovery function now correctly handles applications that have wildcard behavior for file extensions (e.g. those that return a specific response for admin.xxx regardless of the file extension). This eliminates the only known false positives reported by the new Content Discovery engine.