Academy Lab Telemetry Privacy Notice
Summary: PortSwigger states that it collects telemetry data only in specific Burp Suite Academy labs, which are always clearly and visibly marked before a user enters them. In those marked labs it collects technical and interaction data such as activity events, tool usage, and AI interactions, and it notes that free-text fields may contain personal data if users enter it.
Bottom line: The notice places the burden on users to avoid entering personal data in lab free-text fields and to remove, anonymise, or pseudonymise any Customer Personal Data before submission, so anyone training staff in these labs is relying on user discipline rather than a technical control.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026