# PortSwigger

PortSwigger is a cybersecurity company based in the United Kingdom, founded in 2008. It has 3 products listed on CybersecTools.

> Web app security testing tools and education via Burp Suite and Academy

Source: https://cybersectools.com/companies/portswigger-ltd · Updated November 2026

## Quick facts

- Category: [Application Security](https://cybersectools.com/categories/application-security)
- Type: Product vendor
- Headquarters: United Kingdom
- Founded: 2008
- Products listed: 3
- Website: [portswigger.net](https://portswigger.net/)

## What does PortSwigger do?

PortSwigger is a web security company founded in 2003 by Dafydd Stuttard, who created the original Burp Suite tool. The company develops web application security testing software and provides educational resources for security professionals.

The company's flagship product is Burp Suite, which includes multiple editions: Burp Suite Professional for manual security testing and Burp Suite Enterprise Edition (DAST) for automated scanning at scale in enterprise environments. Burp Suite includes tools such as Burp Proxy, Spider, Scanner, Repeater, and a vulnerability scanning engine. The platform supports over 200 community-developed extensions through the BApp Store.

PortSwigger operates a research division led by Director of Research James Kettle, which discovers and exploits vulnerabilities. Research findings are integrated into Burp Suite and educational materials. The team has published original research on topics including server-side template injection.

The Web Security Academy is a free educational platform that has reached over one million users. It features more than 200 topics and interactive labs covering web vulnerabilities, including recently discovered ones. The company also published the Web Application Hacker's Handbook, which has reached over 100,000 security professionals.

PortSwigger serves over 70,000 customers, including 16,000 enterprise organizations such as Amazon, NASA, Microsoft, and Samsung. The company has been featured in the Gartner Magic Quadrant for Application Security Testing and received the Queen's Award for Enterprise. The company is headquartered in Knutsford, UK.

Categories: [Application Security](https://cybersectools.com/categories/application-security), [Threat Intelligence](https://cybersectools.com/categories/threat-intelligence), [Human Risk](https://cybersectools.com/categories/human-risk), [Security Operations](https://cybersectools.com/categories/security-operations)

## PortSwigger products

- [Burp Suite Professional](https://cybersectools.com/tools/burp-suite-professional): A web application security testing platform that combines manual and automated testing tools for conducting comprehensive security assessments and penetration testing. (commercial)
- [PortSwigger Burp Suite DAST](https://cybersectools.com/tools/burp-suite-enterprise-edition): An enterprise-scale dynamic application security testing (DAST) platform that provides automated vulnerability scanning and security assessment for web applications. (commercial)
- [PortSwigger](https://cybersectools.com/tools/portswigger): A comprehensive toolkit for web application security testing, offering a range of products and solutions for identifying vulnerabilities and improving security posture. (free)

---

More on PortSwigger: funding, momentum, hiring and news, plus the full product and company record, are available through the Mandos MCP Server (paid plans), which connects to AI assistants: https://mandos.io/mcp?utm_source=cybersectools.com&utm_medium=company-md