Portswigger LTD

Portswigger LTD, a United Kingdom–based for-profit software publisher, supplies Burp Suite web application security testing software to federal agencies as a prime contractor on small-dollar purchase orders, with no set-aside designation and no subcontract footprint.

Portswigger is a corporate entity (tax-exempt structure) registered in SAM.gov and competes on full-and-open basis across civilian and defense IT buyers. Recent awards show the vendor delivers a single product line — Burp Suite, an integrated platform for offensive security assessment of web applications — across multiple federal customer agencies. The vendor's capability is narrowly scoped: commercial web application vulnerability scanning and penetration-testing software, licensed on one-year subscription or perpetual-license terms. Representative awards include a $449,000 one-year Burp Suite subscription to the Navy Installations Command (award date September 29, 2023), a $13,190 purchase order to the Department of the Interior's Bureau of Safety and Environmental Enforcement for Burp Suite software (award date January 11, 2025), and a $1,425 purchase order to West Point for Burp Suite web application security testing software (award date April 1, 2026, ultimate completion March 21, 2027).

Customer concentration is split between volume and dollars. The top five agencies by award count account for 79% of awards across nineteen total prime awards. The Navy Installations Command leads by award count (5 awards, $2 thousand combined potential value), followed by the FBI Headquarters Division (4 awards, $4 thousand) and the Department of the Interior BSEE (3 awards, $37 thousand). However, potential value ranking diverges sharply: BSEE dominates dollars at $37 thousand across three awards — nearly 45% of the vendor's $82 thousand combined potential value — while a single Defense Information Systems Agency award carries $30 thousand. Nine distinct federal agencies have placed orders. All 19 awards are classified under Software Publishers NAICS, with IT software and business application software perpetual-license procurement codes predominating.

Activity shows minimal velocity: one to two awards per year from 2022 through 2023, then a gap in 2024, with isolated awards in 2025 and 2026 (most recent April 1, 2026). Combined potential value across all awards stands at $82 thousand, with all dollars obligated. Only two awards carry completion dates within the next twenty-four months, representing $2 thousand in potential recompete exposure. Portswigger operates exclusively as a prime and carries no subcontract relationships in the source data. The vendor's federal footprint is a thin, mature slice of its commercial business — low-velocity, small-dollar purchase orders for a single off-the-shelf security tool across fragmented federal customers with no strategic parent vehicle, no teaming, and no growth signal.