Trust Center

Start your security review
View & download sensitive information
Ask for information
Search items
ControlK

Overview

Welcome to the PortSwigger Trust Center, where our dedication to data privacy and security is at the core of everything we do.

Here, you'll find an in-depth look into our commitment to safeguarding your data, embodied across all aspects of our business.

The Trust Center is your gateway to understanding our security philosophy and gaining access to detailed security documentation.

Discover how we protect your information and reinforce trust through transparency.

Compliance

Cyber Essentials Logo
Cyber Essentials
Cyber Essentials Plus Logo
Cyber Essentials Plus
GDPR Logo
GDPR
ISO 27001 Logo
ISO 27001
ISO 27001 SoA Logo
ISO 27001 SoA

PortSwigger is reviewed and trusted by

Amazon-company-logoAmazon
AXA Mansard-company-logoAXA Mansard
Auto Trader-company-logoAuto Trader
Barclays-company-logoBarclays
Danske Bank-company-logoDanske Bank
Expedia Group-company-logoExpedia Group
FedEx-company-logoFedEx
NASA-company-logoNASA
Prudential-company-logoPrudential
Procter & Gamble-company-logoProcter & Gamble
Thrifty-company-logoThrifty
U.S. Air Force ROTC-company-logoU.S. Air Force ROTC

Documents

All
Public
Private
Pentest Report
Cyber Essentials Plus
ISO 27001
ISO 27001 SoA
Cyber Insurance
Employee Training
Incident Response
Acceptable Use Policy
Access Control Policy
Bring Your Own Device (BYOD) Policy
Business Continuity/Disaster Recovery (BC/DR) Policy
Change Management Policy
Data Classification Policy
Data Security Policy
Encryption Policy
Incident Response Process
Information Security Policy
Network Security Policy
Physical Security Policy
Risk Assessment/Management Policy
Software Development Lifecycle Policy
Vulnerability Management Policy

Risk Profile

Data Access LevelInternal
Impact LevelLow
Recovery Time Objective48-72 hours
View more

Product Security

Audit Logging
Multi-Factor Authentication

Reports

Pentest Report

Data Security

Access Monitoring
Data Backups
Data Erasure
View more

App Security

Responsible Disclosure
HackerOne Mark
Vulnerability & Patch Management

Legal

SubprocessorsAmazon.com-company-logoPayPal-company-logoStripe-company-logoSalesforce-company-logo
Cyber Insurance
Data Processing Agreement
View more

Data Privacy

Employee Privacy Training
Privacy Whitepaper

Access Control

Data Access
Logging
Password Security

Infrastructure

Status Monitoring
Amazon Web Services
Infrastructure Security
View more

Endpoint Security

Disk Encryption
DNS Filtering
Mobile Device Management
View more

Network Security

Data Loss Prevention
Firewall
IDS/IPS
View more

Corporate Security

Employee Training
Incident Response

InfoSec Policies

Acceptable Use Policy
Access Control Policy
Bring Your Own Device (BYOD) Policy
View more

Security Grades

Qualys SSL Labs
PortSwigger.net
B

Knowledge Base (FAQ)

    Does PortSwigger employ on its computers password-protected screen savers that activate automatically to prevent unauthorized access when unattended?
    Describe which measures are taken to not test with confidential or sensitive information, including but not limited to Personal Data.
    Do you review your applications for security vulnerabilities and address any issues prior to deployment to production or publication of a new release?
    Does PortSwigger's application security align with industry recommended practices (e.g., OWASP, SANS Top Twenty, FISMA, ISO 27001/2, etc.)?*
    Describe the physical security of the office
View more

Trust Center Updates

ISO27001:2022

ComplianceCopy link

PortSwigger is proud to announce its ISO 27001:2022 certification (Certification Number: 23631). A copy of certificate can be downloaded from our Trust Centre

Published at N/A

If you need help using this Trust Center, please contact us.

Contact Support

If you think you may have discovered a vulnerability, please send us a note.

Report Issue
Powered bySafeBase Logo