What it does
PortSwigger Web Security Academy provides free web-application security lessons, interactive labs and progress tracking.
Study a vulnerability explanation and then use its associated lab to test your understanding. PortSwigger organizes topics such as injection, authentication and browser-side attacks as learning material with practice. The academy is a separate educational project from Burp Suite software. Use its learning paths to build foundations before jumping between unrelated vulnerabilities.
Sources
- Web Security Academy: Free Online Training from PortSwigger (Oct 26, 2026)