Advance your career and demonstrate your skills, by becoming a Burp Suite Certified Practitioner. Prove your ability to detect and exploit common web vulnerabilities, with the security testing software used by more than 50,000 security professionals worldwide.
By becoming a Burp Suite Certified Practitioner, you will be able to demonstrate your web security testing knowledge and Burp Suite skills to the world. This certification will prove to peers, colleagues, and employers, that you have the ability to:
Detect and prove the full business impact of a wide range of common web vulnerabilities - such as XSS, SQLi, OWASP Top 10 and HTTP Request Smuggling.
Adapt your attack methods to bypass broken defenses, using your knowledge of fundamental web technologies like HTTP, HTML, and encodings.
Quickly identify weak points within an attack surface, and perform out-of-band attacks to attack them, using manual tools to aid exploitation.
Once you become a Burp Suite Certified Practitioner your certificate is valid for five years, and can be shared with employers (and prospective employers) to validate your skills. After five years, your certificate will be marked as expired, but will remain accessible.
Get Burp Suite certified today to showcase your expertise, demonstrate your abilities to prospective employers, and bring accreditation to your self-skilled career development.
In order to become a Burp Suite Certified Practitioner, you will need to undertake (and successfully pass) a three hour exam. This exam will consist of multiple practical challenges, designed to test your knowledge of vulnerabilities as well as your ability to exploit them.
You'll need to be able to complete all "Apprentice" and "Practitioner" level labs in the Web Security Academy.Read more
Take our practice exam as often as you need to get familiar with the structure and time-constraints.Read more
When you're ready, purchase your exam. If you pass, you'll become a Burp Suite Certified Practitioner!Get certified
To undertake the certification, you will need access to Burp Suite Professional. Get a subscription to Burp Suite Professional now, if you don't already have one.
Everything you will need to prepare for the certification, including all of the learning materials, interactive labs, and the practice exam, are available for free. We believe that knowledge should be available and affordable for everyone. We keep our prices low to make this certification, as with all of our products, accessible to as many people as possible.
Don't let the low price point fool you though - the Burp Suite Certified Practitioner certification is equivalent to numerous other, far more costly, certifications already on the market. The skills required to gain this certification demonstrate a comprehensive ability and skill-set in the field of web security testing.
The Burp Suite Certified Practitioner exam is challenging, and heavily focused on problem-solving. To pass the exam, you will need to demonstrate a number of skills and abilities.
We have created a number of resources to help you prepare for the Burp Suite Certified Practitioner exam. We advise that you make full use of these before attempting the exam.
To make the process of taking the exam as easy and secure as possible, we have partnered with a third-party proctoring service called Examity. For information on the system requirements from PortSwigger and Examity, please refer to the exam process page.
The content of this examination has been created by James Kettle and the Web Security Academy team. The exam itself will follow a process fairly similar to that of the labs within the Web Security Academy, but in order to take the exam you will first need to go through an identity verification process with Examity.
Each user who successfully passes the Burp Suite Certified Practitioner exam will receive a link to their certificate, with a unique certification identifier. This identifier can be included on your CV, shared with employers, and posted to your social profiles.
The validity of your certification will be verified by your certificate, including the start and end date. Once acquired, your certification will last for five years. When your certification expires, you will still be able to access it, but it will be clearly marked as expired.
For more information, please refer to the terms and conditions.