Browse / PortSwigger Web Security

PortSwigger Web Security

See its reports on the map

Attack surface: 928 known subdomains

Not every host here is in scope. Check the program's policy before testing. Last updated 2026-11-13.

What gets reported to PortSwigger Web Security

• Information Disclosure6
• Cryptography4
• Cross-site Scripting4
• Business Logic4
• Access Control4
• Code Execution3

Most upvoted reports

AllValidInformativeN/ADuplicate

1. CSP Bypass and escalation of https://hackerone.com/reports/2279346N/ABusiness Logic Errors · high
   48 votes
2. Activat burp suite pro with the old license after transfared to anothe accountN/ABusiness Logic Errors
   6 votes
3. HTTP OPTION Method is Enabled on portswigger.net N/AViolation of Secure Design Principles · low
   6 votes
4. Browser Self XSS Protection not implementedN/AInformation Disclosure
   5 votes
5. Email SpoofingN/AViolation of Secure Design Principles · low
   3 votes