PortSwigger Web Security Academy
Free online web security training with interactive labs from the creators of Burp Suite.
Technical Architecture & Overview
The Web Security Academy offers free learning materials and interactive labs covering SQL injection, XSS, CSRF, access control, race conditions, GraphQL, and API testing, with content from PortSwigger, the creator of Burp Suite. Labs include written solutions for when learners get stuck, and PortSwigger states that the academy is constantly updated.
Targeted Technical Use Cases
Learning web exploitation systematically through free interactive labs.
Evaluation & Trade-offs
Core Strengths
- +Content from PortSwigger's in-house research team.
- +Free online training with interactive labs.
- +Progress tracking across a large curriculum.
Trade-Offs & Limitations
- -Web security only.
- -Lab solutions are written around Burp Suite.
Defensive Security Application
Building web attack literacy through hands-on labs.
Frequently Asked Questions
What is PortSwigger Web Security Academy?→
The Web Security Academy offers free learning materials and interactive labs covering SQL injection, XSS, CSRF, access control, race conditions, GraphQL, and API testing, with content from PortSwigger, the creator of Burp Suite. Labs include written solutions for when learners get stuck, and PortSwigger states that the academy is constantly updated.
What is PortSwigger Web Security Academy used for?→
Learning web exploitation systematically through free interactive labs.
What are the strengths of PortSwigger Web Security Academy?→
- +Content from PortSwigger's in-house research team.
- +Free online training with interactive labs.
- +Progress tracking across a large curriculum.
What are the limitations of PortSwigger Web Security Academy?→
- +Web security only.
- +Lab solutions are written around Burp Suite.
How is PortSwigger Web Security Academy used defensively?→
Building web attack literacy through hands-on labs.