PortSwigger Web Security Academy (web hacking labs)
PortSwigger
Check before you apply: details change often, so confirm on the official page before you apply.
- Who it's for
- Anyone (free PortSwigger account)
Open to: veterans, active duty / transitioning service members, spouses, family or caregivers. - Cost
- Free
- Free with no benefit?
- Yes: no GI Bill, VR&E or VET TEC benefit needed.
- What you get
- Free online web-security training from PortSwigger, the makers of Burp Suite, with interactive labs on how websites get hacked (SQL injection, cross-site scripting, CSRF, API testing and AI/LLM attacks) and how to find those flaws as a penetration tester or bug bounty hunter. A free account tracks your progress, and the free Burp Suite Community Edition works for most labs. The optional Burp Suite Certified Practitioner exam costs $99 and needs a Burp Suite Professional license ($499)
- Type
- Course
- Credential strength
- 2/5: Free hands-on web hacking labs from the makers of Burp Suite; the optional BSCP exam costs $99 plus a Burp Suite Professional license.
- Duration
- Self-paced
- Format
- Online (Online, self-paced interactive labs)
- Deadline
- None (self-paced)
- Next start
- Rolling
- Jobs it can lead to
- Web Application Penetration Tester; Application Security Analyst; Bug Bounty Hunter
- Notes
- PortSwigger says the Academy is 100% free. BSCP = Burp Suite Certified Practitioner. Certification details: portswigger.net/web-security/certification. Not confirmed whether a Burp Suite Professional free trial counts for the exam.
- Official page
- portswigger.net/web-security
- Last checked
- Oct 7, 2026