S
7
c/appsec-toolsnancy_rossnancy_ross1mo agoProlific Poster

Had to pick between Burp Suite Pro and ZAP for a quick audit last Friday

Went with ZAP because I needed something that wouldn't bog down my laptop during a demo for a nonprofit in Austin. Missed the automated scanning features from Burp though and ended up spending an extra 2 hours checking stuff manually. Anyone else run into this tradeoff when working on a tight timeline?
2 comments

Log in to join the discussion

Log In
2 Comments
nancy475
nancy4751mo ago
Used to swear by free tools but that manual slog changed my mind completely.
2
robinj29
robinj291mo ago
Had to pick between Burp Suite Pro and ZAP" ... man, that's like choosing between bringing a firehose or a garden hose to a grease fire. I've done the same dance where I grabbed ZAP for the lightweight feel, only to realize I'm manually clicking through every single endpoint like some kind of caveman. That extra 2 hours you spent? That's just ZAP's way of teaching you patience, I guess. Next time I'll probably just eat the laptop slowdown and shell out for Burp if the timeline's that tight.
1