Website profiles · Technology insights · Alternatives

portswigger.net

We enable the world to secure the web. Burp Suite, the Web Security Academy, and world-leading research from PortSwigger — the AppSec community’s home.

Security & Privacy
Paid content
Visit website
Profile views 10 Outbound visits 1 Normal
PortSwigger Full homepage screenshot

At a glance

Category
Security & Privacy
Language
English
Paid-content signal
Paid contentObserved
Registered
2001
Hosting
Amazon CloudFrontInferred
HTTPS certificate trusted
PassedObserved
Last updated

Related questions

More questions →
What is portswigger.net?
We enable the world to secure the web. Burp Suite, the Web Security Academy, and world-leading research from PortSwigger — the AppSec community’s home.
Does portswigger.net offer paid content?
Paid content or plans are available. Check the website for current prices and included features.
What languages does portswigger.net support?
Primary language: English.
How can I visit portswigger.net?
Use the Visit website link to open the website in a new tab.
What are some alternatives to portswigger.net?
Related websites include xanmod.org, womenlovetech.com, werecoverdata.com, web.scraper.workers.dev, watchguard.com, vettbase.com. Compare their features and pricing for your needs.

Website Overview

An established domain and managed infrastructure suggest continuity of operations and may support dependable delivery, although neither guarantees service quality. Page metadata, canonical configuration and social previews work together to provide more consistent search and sharing presentation.

Domain and Registration

Registered in 2001, this domain has about 25 years of history. That suggests continuity, although ownership and purpose may have changed. Transfer-protection status is present, helping reduce the risk of unauthorized domain transfers. The domain uses the common .net extension, which is not an independent safety signal.

DNS and Email

The lowest TTL is 60 seconds, supporting rapid record changes at the cost of more frequent lookups. Nameservers are provided by Amazon Route 53, indicating managed DNS hosting. MX records point to the Google Workspace email service. CAA records restrict which certificate authorities are authorized to issue certificates. No CNAME was found; the observed records resolve directly to addresses.

TLS and Certificates

The certificate uses an RSA 2048-bit public key, offering broad client compatibility. The server supplied a complete certificate chain. No organization name is present in the certificate; the available fields are consistent with domain validation. The certificate was issued within the Amazon cloud or CDN ecosystem. The certificate is valid for about 197 days in total, with 127 days remaining.

HTTP and Browser Security

The response lacks these common security headers: Referrer-Policy, Permissions-Policy. No X-Powered-By header was found, reducing one common source of backend fingerprinting information. The x-cache, via response header indicates a CDN or caching proxy in the delivery path. No obvious internal addresses or debug information were found in the headers. The Server header contains the custom value '; DELETE carlos FROM users --.

Technology Stack Analysis

The public page identifies Amazon CloudFront without precise versions, leaving fewer clues for version-specific scanning.

Search and Social Sharing

Twitter Card metadata is configured. The title has 55 characters, within a common display range. A meta description is present, with 151 characters. The observed directives allow indexing and link following. No Generator meta tag is publicly exposed.

Hosting and Email
DNSAmazon Route 53
HostingAmazon CloudFront
EmailGoogle Workspace
Approximate IP geolocation (inferred; a CDN or proxy may differ from the origin server) United States flagUnited States Inferred 108.138.85.105

Registration details

RDAP / WHOIS

RegistrarName.com, Inc.
Registered2001-09-09
Expires2027-09-09
Domain statusclient transfer prohibited
Nameserversns-1337.awsdns-39.org、ns-194.awsdns-24.com、ns-1955.awsdns-52.co.uk、ns-573.awsdns-07.net
DNSSECunsigned

DNS records

DNS

TypeNameValueTTLPriority
Aportswigger.net108.138.85.10560—
Aportswigger.net108.138.85.12060—
Aportswigger.net108.138.85.760—
Aportswigger.net108.138.85.8760—
MXportswigger.netaspmx.l.google.com8640010
MXportswigger.netalt1.aspmx.l.google.com8640020
MXportswigger.netalt2.aspmx.l.google.com8640020
MXportswigger.netaspmx2.googlemail.com8640030
MXportswigger.netaspmx3.googlemail.com8640030
MXportswigger.netaspmx4.googlemail.com8640030
MXportswigger.netaspmx5.googlemail.com8640030
NSportswigger.netns-1337.awsdns-39.org172800—
NSportswigger.netns-194.awsdns-24.com172800—
NSportswigger.netns-1955.awsdns-52.co.uk172800—
NSportswigger.netns-573.awsdns-07.net172800—
TXTportswigger.net1password-site-verification=YVY655L23VF2NK3EKDISVZ3ZBU300—
TXTportswigger.netMS=ms35598444300—
TXTportswigger.netZOOM_verify_NV5iWvYrRZaRlK4AJLRWRg300—
TXTportswigger.netanthropic-domain-verification-xf3fkw=yKG6eGGbw6RwHFnoYm4TN5eO9300—
TXTportswigger.netapple-domain-verification=SNLfBITPsMlWyJM1300—
TXTportswigger.netatlassian-domain-verification=deHrwqAJSj2uaJMGyqvI3Fa3xuhoRu8IxDTSfyxOUQSFaaQTXF1rrajXACgSHY5j300—
TXTportswigger.netcalendly-site-verification=bsnI8Xx96051UHIgOv8cHxFfAjPnlrWPhHkrFrXOI300—
TXTportswigger.netdocker-verification=833c2433-4f0b-4b7a-98e3-e3e6b5881efe300—
TXTportswigger.netfireflies-verification=01JWQXQMB8Y9FX3SQD4K0XV7Y1.ffverify.fireflies.ai-request-verification=2025-06-02T08:57:04Z300—
TXTportswigger.netgoogle-site-verification=6woBwFow6l4kR9Zc_oycZMnJuNr8bTN3NNhp-8n1pwM300—
TXTportswigger.netgoogle-site-verification=Eqz2nGbsT9Op6HjPSrg2lHHvuLBT32CpxBKwU3IRCT4300—
TXTportswigger.netgoogle-site-verification=WEEWP33rojjZ_1dNR2WnPYDvrtbp5wL-3aOcccVJwCA300—
TXTportswigger.netjetbrains-domain-verification=3jnfo1e6gs2eu96q1buo1vkgj300—
TXTportswigger.netmiro-verification=1c8d7800878929d552d19bb0a27a09a37d300f5c300—
TXTportswigger.netmistral-domain-verification=4d6193e630018d61387dcd71d1fea790fa6d60d5300—
TXTportswigger.netopenai-domain-verification=dv-iD4WbS9rcPZlyD0C2SWZ8yhb300—
TXTportswigger.netpardot1066743=ce79dea2a842926f242482c76fe7062e2d8ae67d5a3cac1dcdc1340d9bad1695300—
TXTportswigger.netreachdesk-verification=VPyoUadQoeZzjynTZCOp3YV1ow1xkUdVKTlYMORrPTaOpGavmsSBgajillCzIn7u300—
TXTportswigger.netsending_domain1066743=3c0916f2a38904a8c090f6cf2438e10d77fad7d5495ac03a72285ea7462212c0300—
TXTportswigger.netslack-domain-verification=j5aJjyk68dQXyWuSqox37zsmeI56W28a35Rvifzt300—
TXTportswigger.netv=DMARC1; p=none; sp=reject; rua=mailto:[email protected]300—
TXTportswigger.netv=spf1 ip4:23.249.220.34/32 ip4:23.249.220.35/32 ip4:54.240.55.173/32 ip4:54.240.55.174/32 include:_spf.google.com include:spf.redpoints.com include:_spf.salesforce.com ~all300—
TXTportswigger.netzapier-domain-verification-challenge=744995b6-f06d-4b5b-9df7-ae8470cce370300—
CAAportswigger.net0 iodef "mailto:[email protected]"300—
CAAportswigger.net0 issue "awstrust.com"300—
CAAportswigger.net0 issue "comodoca.com"300—
CAAportswigger.net0 issue "letsencrypt.org"300—
CAAportswigger.net0 issue "pki.goog"300—
DMARC_dmarc.portswigger.netv=DMARC1; p=quarantine; sp=reject; rua=mailto:[email protected]; fo=1300—

TLS and certificates

TLS / SSL

AssessmentNormal configuration
Supported protocolsTLSv1.2、TLSv1.3
Negotiated protocolTLSv1.3
Certificate subjectportswigger.net
IssuerAmazon
Valid until2027-01-31T23:59 · Remaining when checked: 127 days
Verification detailsCertificate trust: Passed · Hostname match: Passed

HTTP response headers

HTTP

HeaderValue
content-typetext/html
cache-controlpublic, max-age=60
server'; DELETE carlos FROM users --
strict-transport-securitymax-age=31536000; preload
content-security-policydefault-src 'none'; base-uri 'none'; form-action 'self'; child-src 'self' https://www.youtube.com/embed/; script-src 'self' https://ps.containers.piwik.pro/ppms.js https://ps.piwik.pro/ppms.js https://www.youtube.com/iframe_api https://www.youtube.com/s/player/ https://tags.srv.stackadapt.com/events.js https://go.portswigger.net/pd.js https://phingest.portswigger.com https://phingest.staging.portswigger.com 'nonce-cd241ad0671d802a247babd7632ea1da' 'strict-dynamic'; style-src 'self' https://tags.srv.stackadapt.com/sa.css https://fonts.googleapis.com/css2 https://unpkg.com/[email protected]/animate.css https://unpkg.com/@teleporthq/teleport-custom-scripts/dist/style.css 'nonce-cd241ad0671d802a247babd7632ea1da'; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' https://apollo.portswigger.com/ https://apollo.staging.portswigger.com/ https://i.ytimg.com/ https://tags.srv.stackadapt.com/sa.jpeg; media-src 'self' https://d21v5rjx8s17cr.cloudfront.net/ https://d2gl1b374o3yzk.cloudfront.net/; frame-src 'self' https://www.youtube.com/embed/ https://www.google.com/recaptcha/; connect-src 'self' https://ps.containers.piwik.pro https://ps.piwik.pro https://tags.srv.stackadapt.com https://go.portswigger.net https://tracking-api.g2.com https://phingest.portswigger.com https://phingest.staging.portswigger.com https://www.google.com/recaptcha/ https://formsubmission.portswigger.net https://formsubmission.staging.portswigger.com;
x-frame-optionsSAMEORIGIN
x-content-type-optionsnosniff

Identified technologies
Amazon CloudFront

Pages, Search and Sharing
Meta descriptionWe enable the world to secure the web. Burp Suite, the Web Security Academy, and world-leading research from PortSwigger — the AppSec community’s home.
Canonical URLhttps://portswigger.net/
LanguageEnglish (default)
Twitter Cardsummary_large_image

Social Sharing Preview

9 fields

robots.txt (opens in a new tab)

1 rules
All bots 0 allowed · 1 disallowed
  • Disallow/bappstore/bapps/download/

Sitemaps

2

User reviews (0)

  • No reviews yet.