---
specification: FinOps Framework
specificationVersion: '1.0'
schema: https://www.finops.org/framework/
provider: PortSwigger
providerId: portswigger
created: '2026-06-12'
modified: '2026-06-12'
reconciled: true
tags:
  - FinOps
  - FOCUS
  - Security
  - DAST
description: FOCUS-aligned FinOps for PortSwigger Burp Suite security testing platform.
sources:
  - https://portswigger.net/pricing
  - https://portswigger.net/burp/dast/pricing
  - https://portswigger.net/burp/account-and-subscription-management/pay-as-you-scan
alignedWith:
  framework: FinOps Foundation Framework
  frameworkUrl: https://www.finops.org/framework/
  dataSpec: FOCUS
  dataSpecVersion: '1.3'
  dataSpecUrl: https://focus.finops.org/focus-specification/v1-3/
publisherName: PortSwigger
serviceCategory: Security
billingModel:
  pricingCategory: Subscription and Metered
  billingFrequency: Monthly
  billingCurrency: USD
focusColumns:
  ServiceName: PortSwigger Burp Suite
  ServiceCategory: Security
  ProviderName: PortSwigger
  PublisherName: PortSwigger
  BillingCurrency: USD
meters:
  - name: Scan Hours
    unit: hours
    aggregation: sum
    description: >-
      Number of scanning hours consumed in the PAYS (Pay-as-you-scan) model.
      Billed per minute, rounded to the nearest cent. Default cap of 500 hours
      per month.

  - name: User Licenses
    unit: user-years
    aggregation: sum
    description: >-
      Number of Burp Suite Professional user licenses purchased. Each user
      requires an individual annual subscription.

  - name: DAST Enterprise Seats
    unit: enterprise-instance
    aggregation: max
    description: >-
      Enterprise DAST subscriptions are priced per instance/deployment with
      unlimited users. Cost determined by deployment size and scan volume,
      quoted by PortSwigger sales.
principles:
  - name: Visibility
    description: >-
      Track Burp Suite DAST scan hours monthly via the PAYS billing dashboard.
      Monitor user license utilization across Professional seats to identify
      unused licenses.
  - name: Optimization
    description: >-
      Right-size scan hour caps to avoid overage billing. Consolidate Professional
      licenses where users share testing scope. Evaluate multi-year license
      discounts (10-25% savings common) for stable team sizes.
  - name: Allocation
    description: >-
      Tag scan configurations by team or project in Burp Suite DAST to allocate
      scan costs to engineering teams or application portfolios for chargeback
      or showback reporting.