PortSwigger Academy

PortSwigger Web Security Academy offers free online training and interactive labs for web application security.

portswigger.net/web-security
PortSwigger Academy homepage screenshot

About PortSwigger Academy

PortSwigger Web Security Academy is a free online training platform for web application security, created by the team behind Burp Suite. It offers educational materials and interactive labs covering a wide range of web vulnerabilities, with content developed by PortSwigger's in-house research team, academics, and Dafydd Stuttard, author of The Web Application Hacker's Handbook. Users can create a free account to track progress, and the platform is regularly updated to include emerging topics like AI-powered scanner vulnerabilities. The interactive labs are designed to provide hands-on practice that translates to real-world cybersecurity tasks such as penetration testing and bug bounty hunting.

Key features

  • Free interactive labs covering common and emerging web vulnerabilities
  • Progress tracking for completed learning materials and labs
  • Content developed by PortSwigger's in-house security research team
  • Labs covering AI-powered scanner prompt injection attacks
  • Hall of Fame recognition for users who solve new labs first
  • Optional video summaries for many training topics
Best for: Aspiring penetration testers, bug bounty hunters, and anyone seeking to learn web application security skills.
Good for
  • 100% free access to all training materials and interactive labs
  • Content is regularly updated to cover emerging web security vulnerabilities
  • Interactive labs provide hands-on practice that translates directly to real-world cybersecurity tasks
Watch out for
  • Some interactive labs require external security testing tools to complete

PortSwigger Academy at a glance

Type
Website
Pricing
Not confirmed. Check the site
Platforms
Web
Open source
Not stated
Last checked
Oct 6, 2026 · Online when checked
Listed
Oct 5, 2026

PortSwigger Academy alternatives

Tools and sites you could use instead, ranked by how closely they match.

All 24 alternatives

SQL Practice

sql-practice.online

SQL Practice provides a browser-based SQL editor with SQLite and PostgreSQL execution, plus compatibility labs and guided Oracle exercises.

Juice Shop

owasp.org/www-project-juice-shop

OWASP Juice Shop is an intentionally insecure web application for security training, awareness demonstrations, CTFs, and tool testing.

Popular in Learn to Code

Well-known listings from the same topic.

All 387

PortSwigger Academy FAQ

Is the Web Security Academy free to use?
Yes, all training materials and interactive labs are available at no cost.
Do I need an account to access the training content?
No, but creating an account allows you to track your progress.
What tools are needed to complete the interactive labs?
Some labs require security testing tools; Burp Suite Community Edition is available for free for this purpose.
Is something wrong or out of date?

Tell us and an editor will check it.

Own this website?

Claim the listing and suggest updates yourself. An editor checks every claim first.

Claim this listing