Hacksplaining teaches secure coding through interactive browser lessons covering OWASP Top 10 and GenAI threats.
PortSwigger Academy
PortSwigger Web Security Academy offers free online training and interactive labs for web application security.

About PortSwigger Academy
PortSwigger Web Security Academy is a free online training platform for web application security, created by the team behind Burp Suite. It offers educational materials and interactive labs covering a wide range of web vulnerabilities, with content developed by PortSwigger's in-house research team, academics, and Dafydd Stuttard, author of The Web Application Hacker's Handbook. Users can create a free account to track progress, and the platform is regularly updated to include emerging topics like AI-powered scanner vulnerabilities. The interactive labs are designed to provide hands-on practice that translates to real-world cybersecurity tasks such as penetration testing and bug bounty hunting.
Key features
- Free interactive labs covering common and emerging web vulnerabilities
- Progress tracking for completed learning materials and labs
- Content developed by PortSwigger's in-house security research team
- Labs covering AI-powered scanner prompt injection attacks
- Hall of Fame recognition for users who solve new labs first
- Optional video summaries for many training topics
- 100% free access to all training materials and interactive labs
- Content is regularly updated to cover emerging web security vulnerabilities
- Interactive labs provide hands-on practice that translates directly to real-world cybersecurity tasks
- Some interactive labs require external security testing tools to complete
PortSwigger Academy at a glance
- Website
- portswigger.net/web-security
- Category
- Education & Learning › Learn to Code
- Type
- Website
- Pricing
- Not confirmed. Check the site
- Platforms
- Web
- Open source
- Not stated
- Last checked
- Oct 6, 2026 · Online when checked
- Listed
- Oct 5, 2026
PortSwigger Academy alternatives
Tools and sites you could use instead, ranked by how closely they match.
echoCTF.RED provides offensive and defensive cybersecurity training labs and community access.
Reverse Engineering Academy covers fundamentals of reverse engineering, binary analysis, and software security.
SQL Practice provides a browser-based SQL editor with SQLite and PostgreSQL execution, plus compatibility labs and guided Oracle exercises.
Professor Messer offers free video training, study notes, and study group replays for CompTIA A+, Network+, and Security+.
OWASP Juice Shop is an intentionally insecure web application for security training, awareness demonstrations, CTFs, and tool testing.
Popular in Learn to Code
Well-known listings from the same topic.
PortSwigger Academy FAQ
Is the Web Security Academy free to use?
Do I need an account to access the training content?
What tools are needed to complete the interactive labs?
Tell us and an editor will check it.
Claim the listing and suggest updates yourself. An editor checks every claim first.











