There is very little here in terms of process, mindset, and tooling. This training is designed around specific vulnerabilities. It sounds like I'm giving you a reason not to take my classes doesn't it? Well, not quite. On a technical level, this is the best web application security content you can find, and it's completely free. If you've taken one of my classes, then you've heard me rave about this. The certification exam preparation is really all about the Web Security Academy. But this isn't about any of that, so the remainder of this article will focus on the first two steps of the process. I just found it amusing.Īt a high level the process is fairly simple with the actual purchase and setup for the certification exam being the most complex given the nature of remote virtual proctoring. I found it funny that the process stopped at them getting paid as there was no 4th step or beyond to actually take the certification exam, receive a score, etc. Portswigger documents the following process for becoming a Burp Suite Certified Practitioner:

I am a user and consumer just like everyone else reading this. I get no compensation from Portswigger or any of their competitors.

No one has in any way influenced the things I say here. This article only includes facts observed and opinions formed by exercising the documented certification process. This article does NOT include spoilers or a walk through of the practice exam. Below are my takeaways from the process and thoughts I want to share with others that are considering an attempt at becoming a Burp Suite Certified Practitioner. As a Burp Suite enthusiast and self-proclaimed subject matter expert, I decided to exercise the certification preparation process as a way to sharpen my skills, provide insight to others on the preparation process, and ultimately decide whether or not I would give the certification exam an attempt myself. Portswigger recently announced their Burp Suite Certified Practitioner certification.

Burpsuite pro cost