# PortSwigger Web Security Academy: how AI models rank it, October 2026

IT AI Recommendation Index, October 2026 Edition. Named in 7 judge labels across 1 categories by 6 of 14 models. Page: https://it-ai-index.com/vendors/portswigger-web-security-academy/

## Standing by category

| Category | Share | Rank | Negative rate | Labels |
|---|---|---|---|---|
| Secure code training | 8% | 4 | 0% | 7 |

## What the models said for it

- "It is widely considered the gold standard for web application security training... Choose PortSwigger Web Security Academy if you want the highest quality, hands-on security training available, without paying a dime." (Gemini 3.5 Flash, Secure code training)
- "The Gold Standard (100% Free): PortSwigger Web Security Academy ... arguably the best resource available anywhere" (Qwen 3.7 Flash, Secure code training)
- "Arguably the best free web-vulnerability training on the internet, with deep self-paced labs" (Muse Glimmer 30B, Secure code training)
- "PortSwigger Web Security Academy is the best choice by far" (DeepSeek V4 Flash, Secure code training)

## In its own words

What PortSwigger Web Security Academy's own pages state, read 2026-10-05. Stated by the vendor, not checked by the index.

- Positioning: Learn about vulnerabilities first-hand, online. (https://portswigger.net/)
- For: practitioners (https://portswigger.net/)
- Price stated: free (https://portswigger.net/customers)
- Free plan or trial: free (https://portswigger.net/customers)
- Certifications: GDPR, ISO/IEC 27001, ISO/IEC 27001 SoA, VPAT
- Hosting: Ireland, UK, US
- Customers named: Amazon, AXA Mansard, Auto Trader, Barclays, Danske Bank, Expedia Group, FedEx, NASA

## What it publishes

Every page portswigger.net exposes, read 2026-10-05: 3080 addresses. By kind, pages and the last 90 days:

- blog: 342 pages, 6 in the last 90 days, latest 2026-08-12
- case study: 22 pages, 0 in the last 90 days, latest undated
- webinar or virtual event: 8 pages, 0 in the last 90 days, latest 2025-09-24
- conference or event: 1 pages, 0 in the last 90 days, latest undated
- report or ebook: 159 pages, 5 in the last 90 days, latest 2026-09-23
- comparison: 7 pages, 0 in the last 90 days, latest undated
- template or tool: 125 pages, 0 in the last 90 days, latest undated
- glossary or explainer: 1 pages, 0 in the last 90 days, latest undated
- news or press: 13 pages, 0 in the last 90 days, latest undated
- Recent: 2026-09-23 report or ebook: Http3 in burp suite https://portswigger.net/research/http3-in-burp-suite
- Recent: 2026-08-25 report or ebook: Whats in a tag name javascript apparently https://portswigger.net/research/whats-in-a-tag-name-javascript-apparently
- Recent: 2026-08-12 blog: Can ai invent new attack techniques new research from james kettle and portswigger research https://portswigger.net/blog/can-ai-invent-new-attack-techniques-new-research-from-james-kettle-and-portswigger-research
- Recent: 2026-08-06 report or ebook: CSS:the bomb inside your inbox https://portswigger.net/research/css-the-bomb-inside-your-inbox
- Recent: 2026-08-05 report or ebook: Can ai do novel security research https://portswigger.net/research/can-ai-do-novel-security-research
- Recent: 2026-08-05 report or ebook: Crlf powered desync attacks https://portswigger.net/research/crlf-powered-desync-attacks

## Record

- Method: https://it-ai-index.com/methodology/
- Raw judge labels and full responses: https://it-ai-index.com/data/
- License: CC BY 4.0. Cite as IT AI Recommendation Index, October 2026 Edition, it-ai-index.com.