Burp Suite certification: a year in review
Summary: PortSwigger marked one year since launching its Burp Suite Certified Practitioner exam, a practical, time-based test of exploiting common web vulnerabilities with Burp Suite Professional. Based on user feedback and internal testing, the company extended the exam from three to four hours and revised its preparation guidelines, adding a list of core Web Security Academy labs and a mystery lab challenge with no context or hints.
Key Takeaway: The exam now runs four hours and requires an active Burp Suite Professional license, so anyone building or validating web security skills should plan for that time and licensing cost before scheduling.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026