macOS
brew install --cask burp-suitelocal Homebrew cask metadata
cask
Web security testing toolkit. Version 2026.10.1 via Homebrew Cask; verified from local package data.
install
brew install --cask burp-suitelocal Homebrew cask metadata
overview
Web security testing toolkit
No executable aliases were found in the local package database.
history
Burp Suite is PortSwigger's integrated toolkit for assessing web applications. The Community Edition centers on intercepting, inspecting, modifying, and replaying HTTP traffic during manual security testing.
Dafydd Stuttard wrote the first Burp implementation during PortSwigger's 2003โ2006 early-history period. Burp Suite 1.0 combined Proxy, Sock, Spider, and Repeater.
The suite subsequently accumulated tools such as Intruder, Sequencer, Decoder, and Comparer. PortSwigger's 2007 v1.1 announcement records the transition of a major beta into a general release.
Later releases introduced disk-backed projects and JSON configuration import/export while retaining temporary-project and global user-setting workflows.
PortSwigger maintains Community and Professional desktop editions. The free Community Edition provides the core manual-testing workflow, while the Professional edition extends it with automated and advanced tooling.
Burp's role expanded alongside PortSwigger's training and publishing work, including The Web Application Hacker's Handbook, helping establish a shared tool vocabulary among web-security practitioners.
Users typically configure a browser or the bundled browser to send traffic through Burp Proxy, inspect requests in HTTP history, alter intercepted messages, and replay selected requests with Repeater.
Settings may be global to the user or scoped to a project. Burp can export and import JSON configuration files, but the official documentation leaves their save location to the user rather than defining a fixed configuration path.
Burp Suite is a canonical package in security-oriented workstation setups: installing the cask provides a repeatable way to obtain the desktop interception proxy without manually managing the vendor download.
Package maintainers care about its Java-based, cross-platform lineage, separate Community and Professional editions, embedded browser, extension ecosystem, and persistent project-versus-user settings model.
security posture
No matching local secret-handling manifest was found for burp-suite. Package metadata is still published here so future coverage has a stable package URL.
Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.
executables
| Command | Kind | Exposure | Note |
|---|---|---|---|
| No executable data was present. | |||
freshness
These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.
install metadata
| Package key | cask:burp-suite |
|---|---|
| Version | 2026.10.1 |
| Package manager | Homebrew Cask |
| Package manager page | https://formulae.brew.sh/cask/burp-suite |
| Homepage | https://portswigger.net/burp/ |
| Upstream docs | https://portswigger.net/burp/ |
| Source archive | https://portswigger-cdn.net/burp/releases/download?product=desktop&version=2026.10.1&type=MacOsArm64 |
| SHA-256 | 77a343a0e8ac80784382f33c54ce8c0516618ad7d92a97eb6e014b57d8f2f07d |
| Bottle | not recorded |
| Homebrew post-install | not defined |
| Service | none declared |
registry facts
| Source Database | Homebrew cask API |
|---|---|
| Tap | homebrew/cask |
| Full Token | burp-suite |
| Names |
|
| Old Tokens |
|
| Conflicts With | |
| Artifacts | |
| Deprecated | no |
| Disabled | no |
source trail
This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.
View the package source record on GitHub.