Table of contents
19
Read this in 30 seconds: Searching for Burp AI pricing returns directory pages that disagree with each other, because PortSwigger sells AI through three separate meters and prints the price of only two. I read PortSwigger’s own pages and Caido’s on 7 November 2026 to put a number on each.
- Burp AI pricing starts with a $499 licence, not with the AI. Burp Suite Professional is $499 on PortSwigger’s product page, and every AI feature and the Burp AT agent requires that licence. Burp Community cannot buy AI credits.
- Burp AT now has printed prices, but the credit price still does not. Burp AT costs $19, $89 or $249 per user per month, yet the AI credits behind Repeater and Explore Issue are priced only inside your PortSwigger account. A 2025 release note equated 10,000 free credits with $5, and nothing since says what a purchased pack costs.
- A first year of Burp AI pricing at the middle tier is $1,567. That is Burp Pro plus the Burp AT Plus tier, meaning $499 plus 12 months of $89, with credits extra. Caido Individual with the AI assistant is $200 a year.
- PortSwigger stores your AI prompts and has no deletion schedule for them. Its trust page says providers keep nothing, but PortSwigger retains conversation and audit data and does not currently delete it on a fixed schedule.
- Burp AI pricing does not buy you a choice of model or an offline mode. Burp AI uses OpenAI and Anthropic models, Burp AT uses Anthropic models, and PortSwigger chooses which.
If you came here to find one number for Burp AI pricing, there isn’t one, and that is the real answer. Burp AI pricing means a licence, then a pile of credits you top up, then, since Burp 2026.7, a separate monthly tier if you want the agent.
This Burp AI pricing guide lays out every meter, adds up a realistic first year, compares it with Caido and with a standalone AI agent, and says which numbers PortSwigger still keeps behind a login. I did not run a paid Burp AI session, so every figure below comes from a vendor page I read, with the page named.
Burp AI pricing has five parts: the Burp Suite Professional licence, pay-as-you-go AI credits, the Burp AT monthly tiers, a team subscription and an enterprise offer, and only the licence and the Burp AT tiers show a dollar figure publicly. Everything else says “talk to us” or sits behind your account page.
| Meter | What it pays for | Price | Where it is printed |
|---|---|---|---|
| Burp Suite Professional | The licence every AI feature needs | $499 on the product page, one user per licence | PortSwigger product page |
| Burp AI credits | Repeater prompts, Explore Issue, Explainer, extensions | Not printed in the docs | Bought from My Account, per the credits doc |
| Burp AT Standard | The agent, light use | $19 per user per month | Burp AT pricing |
| Burp AT Plus | The agent, about 5x the Standard usage | $89 per user per month | Same page |
| Burp AT Power | The agent, about 16x the Standard usage | $249 per user per month | Same page |
| Burp AI Subscriptions | Team-wide Burp AI without credit management | Annual, quoted by form | Burp AI Subscriptions |
| Burp AT Team and Enterprise | Team seats, scheduled autonomous tests | “Talk to us” | Burp AT pricing page |
Two details matter before you do any maths. Every paid Burp Suite Professional licence includes a small monthly Burp AT allowance at no extra cost, and the three Burp AT tiers all give you the same agent and differ only in how much you can use each month. So the first step in any Burp AI pricing plan is to use the allowance you already own.
You cannot buy any Burp AI feature without a paid Burp Suite Professional licence, so the licence is the first line of every Burp AI pricing estimate. The credits doc says you must have a Professional licence associated with your account to buy AI credits, and the Burp AT setup page lists a Professional licence on version 2026.7 or later as a requirement.
PortSwigger’s product page prints a “Buy” price of $499. It does not say “per year” next to the figure. The buy form offers terms from one year to ten years and a choice of dollars, euros or pounds, and it says everyone who uses Burp needs their own subscription, even if two people never use it at the same time. Third-party guides quote $475 to $499 a year, and I would treat $499 for a one-year term as the safe planning number.
The free route does not carry AI. Burp Community Edition is the free tier, and PortSwigger describes Burp AI as a set of features in Burp Suite Professional. If you are weighing Burp AI pricing against a free proxy, the comparison starts $499 behind before any AI is used.
Credits are the pay-as-you-go meter in Burp AI pricing: you buy a balance in your PortSwigger account and each AI action draws it down, but the price of a credit is not in the documentation. The only dollar figure I found is from the 13 February 2025 release notes, which gave new users 10,000 free credits and equated them with $5 of AI requests. That is a valuation of a gift, not a price list.
What the docs do say is worth knowing before you spend:
Burp AI pricing buys six things according to the Burp AI documentation: prompts in Repeater, Explore Issue, Explainer, false-positive reduction for broken access control scan checks, AI-generated recorded logins and AI-powered extensions. None of them run unless you switch them on.
Because the rate is not printed, measure it. Click the AI icon in the bottom-right corner of Burp to read your balance, run one task you would repeat on every engagement, and read the balance again. Multiply by the number of such tasks in a typical month. That gives you a real Burp AI pricing figure for your workflow, which no directory page can, and it is the number the Burp AI pricing pages leave out.
PortSwigger’s subscriptions page hints at why this matters. It quotes Dominic White of Orange Cyberdefense saying that on a typical five-day test, credit consumption alone would have exceeded the extra cost of a team subscription. That is a vendor-published quote with no numbers behind it, so read it as a direction and not a rate.
Burp AT pricing is the part of Burp AI pricing that changed most recently: PortSwigger now prints three individual tiers at $19, $89 and $249 per user per month, and all three require a Burp Suite Professional licence. Burp AT is the agent that arrived in Burp 2026.7, and its tiers are the newest part of Burp AI pricing. You give it a testing goal and it works through Burp’s own tools, with scope and approval rules that Burp enforces outside the model.
| Tier | Price per user per month | Usage versus Standard | Price per Standard-sized unit |
|---|---|---|---|
| Standard | $19 | 1x | $19.00 |
| Plus (marked recommended) | $89 | about 5x | about $17.80 |
| Power | $249 | about 16x | about $15.56 |
The last column is my arithmetic from PortSwigger’s rounded multipliers, so it is approximate. It shows a modest volume discount: the heaviest tier costs about 18 percent less per unit than Standard. Individual plans are on a monthly rolling basis and you can change plan at any time, which makes Standard a cheap place to start.
Three cautions apply. Burp AT is in public beta, so these prices could change when it leaves beta. The tiers are described in “usage”, not in credits, and PortSwigger does not say how a tier maps to the credit balance. And the documentation page I read, last updated 6 November 2026, still says Burp AT uses AI credits, while the pricing page describes the monthly tiers. Until PortSwigger reconciles the two, assume the credit meter and the tier meter may both apply and ask support before you rely on one.
A first year of Burp AI pricing, meaning Burp Suite Professional with Burp AT, costs between $727 and $3,487 depending on the Burp AT tier, before any credit purchases, while Caido Individual with its AI assistant is $200. These are first-year totals from the printed prices, and the products are not equivalent, so read the chart as a budget map and not as a quality ranking.
| Option | Arithmetic | First-year cost |
|---|---|---|
| Caido Basic | Free, no AI assistant | $0 |
| Caido Individual (yearly) | $200 per year, plus tax | $200 |
| XHack Starter | $20 x 12 | $240 |
| Burp Suite Professional alone | $499 licence | $499 |
| XHack Professional | $49 x 12 | $588 |
| Burp Pro plus Burp AT Standard | $499 + $19 x 12 | $727 |
| Burp Pro plus Burp AT Plus | $499 + $89 x 12 | $1,567 |
| XHack Elite | $150 x 12 | $1,800 |
| Burp Pro plus Burp AT Power | $499 + $249 x 12 | $3,487 |
Burp AI credits are extra on every Burp row, and Caido charges $20 a month if you pay monthly instead of yearly. The honest reading of this Burp AI pricing table is that Burp AT Standard is affordable once you own Burp Pro, the Plus tier costs more than the licence itself, and the Power tier only makes sense if the agent replaces billable hours. If you are still deciding whether to pay for a proxy at all, the bug bounty toolkit budget guide walks the free tier first.
Burp AI pricing is only half the cost, because Burp AI sends your traffic to PortSwigger’s AI infrastructure, which stores it. PortSwigger’s AI trust page, last updated 6 November 2026, describes the path: your data goes from Burp to PortSwigger, a temporary processing agent passes it to an AI provider, and the response comes back.
| Question | PortSwigger’s stated answer |
|---|---|
| Do providers keep or train on my data? | No, contracts prohibit it |
| Does PortSwigger store my prompts? | Yes, prompts, responses, tool calls and metadata, for troubleshooting, auditing and billing |
| How long? | Error logs 31 days; conversation and audit data has no fixed deletion schedule |
| Can I choose the model? | No. Burp AI uses OpenAI and Anthropic models; Burp AT uses Anthropic models |
| Where is it processed? | AWS US-East and EU-West; providers process in US data centers; you cannot choose |
| Can I run it offline? | Not currently, per the Burp AI page |
| Can I turn it off? | Yes, AI features can be disabled in settings |
For bug bounty work on public programs, the Burp AI pricing trade-off of stored prompts is usually fine. For a client engagement under an NDA it is a contract question, and the no-deletion-schedule line is the one to take to your client or your legal team. PortSwigger says its AI is covered by its ISO 27001 certification and its data processing agreement.
Caido is the cheapest paid alternative to Burp AI pricing: its Individual plan is $20 a month or $200 a year and includes an AI assistant, with a free Basic tier below it. Caido’s prices load with the page script and do not appear in a plain-text copy of the page, which may be why older comparisons say it prints none. Team is $45 per seat per month or $450 yearly.
| Caido plan | Monthly | Yearly | Limits and AI |
|---|---|---|---|
| Basic | Free | Free | 2 projects, 7 workflows, 3 plugins; no AI assistant |
| Individual | $20 | $200 | Unlimited projects, workflows and plugins; AI assistant; backups |
| Team | $45 per seat | $450 per seat | Shared instances, custom AI providers, Amazon Bedrock |
Prices are plus tax, per Caido’s pricing page. The AI side is moving fast, and the sources disagree with each other. Caido’s assistant documentation says Individual and Team users get 500,000 credits a month, exchanged for tokens on OpenAI models, and that other providers and local models are not supported. But Caido’s v0.59.0 release on 26 October 2026 added a Settings, AI, Providers screen that lists OpenAI, Anthropic, Google Gemini, SpaceXAI, OpenRouter and Amazon Bedrock, with custom endpoints on Team and Enterprise. I could not confirm whether Individual still includes the monthly credit allowance after that change, so check before you buy.
There is also a route that costs nothing beyond your model bill. Caido publishes a skill and an SDK so a coding agent you already run can drive Caido, and a community-built MCP server lets the agent work in the same history you review. OWASP ZAP, which is free, open source and Apache-2.0 licensed, is the other free proxy. If you take the do-it-yourself route, the Claude Code bug bounty guide covers the rules that keep it safe, and the AI bug bounty policy guide covers what programs say about AI-assisted reports.
The right Burp AI pricing path depends on whether you already own Burp Pro and how often you would hand a task to an agent. The table gives a starting point for Burp AI pricing and my own rule of thumb, not a benchmark.
| Your situation | Start here | Why |
|---|---|---|
| You own Burp Pro and use AI occasionally | The included Burp AT allowance, then Standard at $19 | Zero extra cost to test, cheap to extend |
| You own Burp Pro and delegate work weekly | Burp AT Plus at $89, after measuring Standard | Roughly 5x the usage for under 5x the price |
| You do not own Burp Pro and watch every dollar | Caido Individual at $200 a year, or Caido Basic and ZAP at $0 | A $499 licence has to pay for itself first |
| You need a team rollout | Burp AI Subscriptions or Burp AT Team | Per-user credits cannot be pooled |
| Your work is not mostly web traffic | A standalone agent | Burp’s tools are built around web testing |
So yeah, here is where we talk about our own product. I am biased, it is my company, and Burp AT does things XHack does not.
Burp AT sits inside the proxy you already use, drives Burp’s own scanner and tools, uses skills written with PortSwigger Research and enforces scope outside the model. If your work is manual web testing in Burp, that tight fit is a real advantage, and nothing we sell replaces Burp as a proxy.
XHack covers the rest of the engagement. It combines three things most providers sell separately: an autonomous AI agent, a continuous security platform and human testers when you want them. The agent runs up to 12 sub-agents by default and controls three browsers for live testing, so recon, exploit development, mobile and report writing sit in one place instead of a web-only tool. It does not store your agent chats, which stay on your own computer and which you can delete at any time, so the data-retention question above does not arise.
Next to Burp AI pricing, our individual plans are $20, $49 and $150 a month, and there is a 7-day free trial, one per person, with exploitation unlocking after you verify your identity. Full details are on the pricing page, and the agent for bug bounty guide shows the workflow. If you would rather have people run the testing, managed engagements start at $2,500, and you can book a free consultation even if it turns out we are not the right fit. Brutal honesty is kind of our thing.
Burp AI pricing has no single price. You need a Burp Suite Professional licence, listed at $499 on PortSwigger’s product page, and then you pay for AI either by buying credits in your PortSwigger account, whose price is not published, or, for the Burp AT agent, by choosing a monthly tier at $19, $89 or $249 per user. Every paid Professional licence also includes a small monthly Burp AT allowance, so you can try the agent before paying more.
No, Burp AI pricing has no free tier. Burp AI features run inside Burp Suite Professional, which is a paid product, and they use AI credits that you buy. In February 2025 PortSwigger gave new users 10,000 free credits worth about $5, but the current documentation does not promise a free allowance. The Burp AT tiers include a small monthly allowance for Professional licence holders, which is the closest thing to a free tier today.
PortSwigger does not print a credit price in its documentation. Credits are bought from My Account, they expire after 12 months, and they cannot be shared between users. The only published valuation is the 2025 release note that equated 10,000 free credits with $5 of AI requests. To get a real Burp AI pricing number, check your balance in Burp before and after a typical task.
Burp AT is $19 per user per month for Standard, $89 for Plus and $249 for Power, with Plus giving about five times and Power about sixteen times the usage of Standard. All three need a Burp Suite Professional licence, and the product is in public beta. Team and Enterprise pricing is by contact form, and the Burp AI pricing for teams is separate from the individual tiers.
No, Burp AI pricing starts at the Professional licence. PortSwigger describes Burp AI as a set of features in Burp Suite Professional, and the credits documentation says you must have a Professional licence on your account to buy AI credits. Community Edition users who want AI in a proxy can look at Caido, whose free Basic tier excludes the assistant but whose $200-a-year Individual plan includes it.
Not currently. PortSwigger’s trust page says it selects the model for each task, using OpenAI and Anthropic models for Burp AI and Anthropic models for Burp AT, and you cannot choose the model or the processing region. The Burp AI page also says offline use is not available today. Caido added bring-your-own-provider settings in v0.59.0, which is the main difference between the two on this point.
Burp AI pricing is cheaper to start than the directories suggest and harder to forecast than the vendor page implies. The licence is $499, the Burp AT tiers are $19, $89 and $249 a month, and the credit rate is the one number you have to measure yourself.
If you already own Burp Pro, use the included allowance, then try Standard and watch your balance. If you do not, price Caido and a standalone agent before you commit $499. Either way, re-check the Burp AI pricing pages before you buy, because it is a beta and PortSwigger changes it often.
Categories
Related articles
