1. Read our learning materials
Learn about how vulnerabilities arise, and how they can be exploited in the wild.View all topics
2. Practice your skills
Put your skills to the test with our interactive labs and real-world scenarios.View all lab topics
3. Track your progress
Progress from Apprentice to Expert level, and track your rank on our Hall of Fame.Visit dashboard
With so many topics to choose from, you may not be quite sure where to begin. We've created a suggested learning path to help get you going on your journey with the Web Security Academy.
Whatever your experience level might be, we've got a topic for you to get stuck into. Pick one from the suggestions below, or view our full topic list to get started.
We've created a handy set of Burp Suite tutorial videos, to guide you through some of the key tools you'll need when working on the Web Security Academy.
How to intercept HTTP requests and responses using Burp Suite Professional
How to resend individual requests with Burp Repeater
A guide to the Burp Suite Professional user interface
Follow us on Twitter for new topic releases, and to get involved with our wider community.
Learning about web security @WebSecAcademy and don't know how I made it this long in the web design world without getting into this. Now I am hooked. Can't stop playing around in their labs. Just spent an entire long weekend in front of the laptop #websec
Hall of Fame high flyers
To find a place that had all of that information in one location, with a consistently high quality of labs, especially being free, it's a no-brainer. Why wouldn't you dive right into it?! Johnny VillarrealRead about Johnny's Web Security Academy experience
I find that having Burp Suite Pro is really helpful for some of the Web Security Academy labs, so as I'm learning more skills by doing the labs I'm also learning how to use Burp Suite better as well. I just don't think I'd be able to learn the same kinds of skills, to the same level, by doing OSCP or any of those kinds of qualifications. Kamil VavraRead about Kamil's Web Security Academy experience
PortSwigger is a huge company in the cybersecurity field that gives back and creates a community. The way that Burp has developed, how you listen to the community, and create free learning materials. It's absolutely amazing. Andres RauscheckerRead about Andres' Web Security Academy experience