Trust Center

Start your security review

View & download sensitive information

Ask for information

Search items

Overview

Welcome to the PortSwigger Trust Center, where our dedication to data privacy and security is at the core of everything we do.

Here, you'll find an in-depth look into our commitment to safeguarding your data, embodied across all aspects of our business.

The Trust Center is your gateway to understanding our security philosophy and gaining access to detailed security documentation.

Discover how we protect your information and reinforce trust through transparency.

Compliance

Cyber Essentials

Cyber Essentials Plus

GDPR

ISO 27001

ISO 27001 SoA

PortSwigger is reviewed and trusted by

Amazon

AXA Mansard

Auto Trader

Barclays

Danske Bank

Expedia Group

FedEx

NASA

Prudential

Procter & Gamble

Thrifty

U.S. Air Force ROTC

Documents

COMPLIANCECyber Essentials Plus

COMPLIANCEISO 27001

COMPLIANCEISO 27001 SoA

LEGALCyber Insurance

CORPORATE SECURITYEmployee Training

CORPORATE SECURITYIncident Response

INFOSEC POLICIESAcceptable Use Policy

INFOSEC POLICIESAccess Control Policy

INFOSEC POLICIESBring Your Own Device (BYOD) Policy

INFOSEC POLICIESBusiness Continuity/Disaster Recovery (BC/DR) Policy

INFOSEC POLICIESChange Management Policy

INFOSEC POLICIESData Classification Policy

Risk Profile

Data Access LevelInternal

Impact LevelLow

Recovery Time Objective48-72 hours

Product Security

Audit Logging

Multi-Factor Authentication

Reports

We may provide security-related reports upon request.

Data Security

Access Monitoring

Data Backups

Data Erasure

App Security

Responsible Disclosure

Vulnerability & Patch Management

Legal

Subprocessors

Cyber Insurance

Data Processing Agreement

Data Privacy

Employee Privacy Training

Privacy Whitepaper

Access Control

Data Access

Logging

Password Security

Infrastructure

Status Monitoring

Amazon Web Services

Infrastructure Security

Endpoint Security

Disk Encryption

DNS Filtering

Mobile Device Management

Network Security

Data Loss Prevention

Firewall

IDS/IPS

Corporate Security

Employee Training

Incident Response

InfoSec Policies

Acceptable Use Policy

Access Control Policy

Bring Your Own Device (BYOD) Policy

Security Grades

Qualys SSL Labs

PortSwigger.net

Knowledge Base (FAQ)

Does PortSwigger employ on its computers password-protected screen savers that activate automatically to prevent unauthorized access when unattended?

Describe which measures are taken to not test with confidential or sensitive information, including but not limited to Personal Data.

Do you review your applications for security vulnerabilities and address any issues prior to deployment to production or publication of a new release?

Does PortSwigger's application security align with industry recommended practices (e.g., OWASP, SANS Top Twenty, FISMA, ISO 27001/2, etc.)?*

Describe the physical security of the office

Trust Center Updates

ISO27001:2022

ComplianceCopy link

PortSwigger is proud to announce its ISO 27001:2022 certification (Certification Number: 23631). A copy of certificate can be downloaded from our Trust Centre

Published at N/A

If you need help using this Trust Center, please contact us.

Contact Support

If you think you may have discovered a vulnerability, please send us a note.

Report Issue