Burp Suite vs CodeQL

Burp Suite by PortSwigger is a web application security testing platform used for penetration testing and vulnerability scanning. It provides an intercepting proxy, scanner, and extensible toolkit for finding web security issues.

CodeQL is a free static analysis tool developed by GitHub that treats code as queryable data to identify security vulnerabilities and code quality issues. It provides powerful semantic code analysis across multiple programming languages.