Industry-leading free training on web application security with interactive labs.
December 20, 2025
The Web Security Academy is a free, comprehensive training resource for web application security created by PortSwigger, the makers of Burp Suite. It covers all major web vulnerabilities including SQL injection, XSS, CSRF, SSRF, and more. Each topic includes detailed explanations, interactive labs, and practical exercises. The academy is widely regarded as the gold standard for learning web security and is used by professionals worldwide.