Burp Suite grew from a hobby project with comic sound effects into the daily workbench of web-security professionals. PortSwigger’s real trick is the loop behind it: discover an attack, turn it into a tool, then teach the world how it works.
The 20-year-old security firm turned pentesting from a periodic fire drill into a managed, continuous service. Its wager is simple: machines can scan the internet, but humans still decide what is actually dangerous.