Get involved in the Burp challenge for opportunities to test your skills and win swag  –   Challenge me
PortSwigger's Burp Suite Certified Practitioner exam

The Burp challenge

Looking for an opportunity to demonstrate your skills with Burp Suite? Complete the four challenges outlined below - including weekly mini challenges - by 31 December 2022 for chances to prove your skills, win swag, and a Burp Suite Certified Practitioner exam credit.

We'll also be running weekly mini challenges throughout the incentive - completing these mini challenges will give you the opportunity to win exclusive swag bundles. Keep an eye on our social media channels as all mini challenges will be announced there.

1: Complete one practitioner lab from each of the topics

We recommend that you select the most challenging-sounding non-expert lab from each topic, as this will be the best test of your skills.

2: Complete eight specific labs

3: Complete five practitioner-level mystery labs

In some of the labs, you have access to your own account with the credentials wiener:peter. If you can enumerate usernames, you may also be able to brute-force the login using the following username and password wordlists.

Level:

Category:

4: Take and pass the practice exam

You've got two hours to complete the practice exam - are you ready?

Frequently asked questions

The Burp Suite Certified Practitioner exam presents a novel opportunity to demonstrate your skills with the most widely used web application security testing toolkit.

Successfully passing the Burp Suite Certified Practitioner exam indicates a high-level proficiency in web security testing. It is aimed at penetration testers, and the organizations that employ them.

Anyone who has a Web Security Academy account and completes the four steps outlined in the challenge is eligible to be entered into the competition.

You do not need to pass the practice exam on your first attempt. So long as you have completed the four steps outlined in the challenge within the specified time frame, you are eligible to be entered into the competition.

You will receive your exam credit directly into your PortSwigger user account within three to five business days of completing the four steps outlined in the challenge. Please note that PortSwigger is based in the UK, which means that our teams work between 8am and 5pm GMT, Monday to Friday.

Your exam credit will be assigned directly into your PortSwigger user account within three to five business days of completing the four steps outlined in the challenge. Please note that PortSwigger is based in the UK, which means that our teams work between 8am and 5pm GMT, Monday to Friday.

Please log into your PortSwigger user account to see your exam credit. If you do not see an exam credit within your PortSwigger user account after five business days, please contact us.

We recommend that you use your exam credit within 30 days of it being directly assigned to your user account. The exam credit will expire 12 months from the date that it is applied to your PortSwigger user account.

You will need access to an active Burp Suite Professional subscription to complete some of the labs listed above.

So long as you have access to a valid, active Burp Suite Professional license at the time of your certification exam, you will be able to use it to take the exam.

In addition, we require that you use a project file, which we may request up to a week after you have taken the exam to confirm your certificate or investigate any reported issues.