About Web Security Academy
Web Security Academy is free online training for web application security, run by PortSwigger. It is made by the team behind Burp Suite and needs an account to get started.
What it does
The academy teaches common web flaws through interactive labs that you solve in your browser. Topics are grouped into learning paths, and your progress is tracked as you go. The content is updated for new issues, including recent labs on attacks against AI-powered features such as indirect prompt injection.
Key features
- Free interactive labs in the browser
- Learning paths from beginner to advanced
- Progress tracking across topics
- Labs on prompt injection in AI features
- Built by the team behind Burp Suite
Who it's for
The academy suits students, developers who build web apps and anyone starting a security career. Experienced testers may use it to refresh specific topics or to prepare for certifications.
Pricing and good to know
The training is free, and you need to create an account to start. PortSwigger also sells Burp Suite products, which are separate from the academy. Work through the labs on a test setup, not on sites you do not own or have permission to test.
Highlights
- Free interactive labs in the browser
- Learning paths from beginner to advanced
- Progress tracking across topics
- Labs on prompt injection in AI features
- Built by the team behind Burp Suite
