# PortSwigger Web Security Academy: how AI models rank it, November 2026

Gane Index, November 2026 Edition. Named in 8 judge labels across 1 category by 5 of 14 models. Page: https://www.gane.ai/index/it/vendors/portswigger-web-security-academy

## Standing by category

| Category | Share | Rank | Negative rate | Labels |
|---|---|---|---|---|
| [Secure code training](https://www.gane.ai/index/it/developer/secure-code-training/index.md) | 4% | 5 | 0% | 8 |

## What the models said for it

- "PortSwigger Web Security Academy (*Best Overall for Web App Security*) ... one of the highest-quality security resources on the internet" (Gemini 3.5 Flash, Secure code training)
- "PortSwigger Web Security Academy is the single best secure code training platform" (DeepSeek V4 Flash, Secure code training)
- "Choose PortSwigger if you are looking for free, high-quality resources for web-specific security knowledge" (Qwen 3.7 Flash, Secure code training)
- "PortSwigger's academy is the gold standard for web vulnerability education. It is completely free" (Gemini 3.5 Flash, Secure code training)

## By model

| Model | First choice | Alternative | Mention | Warning | Labels |
|---|---|---|---|---|---|
| Claude Haiku 4.5 | 0 | 0 | 0 | 0 | 0 |
| GPT-5.4 mini | 0 | 0 | 0 | 0 | 0 |
| Gemini 3.5 Flash | 1 | 2 | 0 | 0 | 3 |
| Perplexity Sonar | 0 | 0 | 1 | 0 | 1 |
| Grok 4.20 | 0 | 0 | 0 | 0 | 0 |
| Mistral Small | 0 | 0 | 0 | 0 | 0 |
| DeepSeek V4 Flash | 1 | 0 | 0 | 0 | 1 |
| Llama 4 Maverick | 0 | 0 | 0 | 0 | 0 |
| Qwen 3.7 Flash | 0 | 2 | 0 | 0 | 2 |
| Kimi K2 | 0 | 1 | 0 | 0 | 1 |
| GLM 4.7 FlashX | 0 | 0 | 0 | 0 | 0 |
| MiniMax M2.5 | 0 | 0 | 0 | 0 | 0 |
| GPT-6 Luna | 0 | 0 | 0 | 0 | 0 |
| Muse Glimmer 30B | 0 | 0 | 0 | 0 | 0 |

## Sources returned with these answers

The sites and pages cited by the answers that named PortSwigger Web Security Academy, from 13 of the 18 answers that named it (only the models that return a source list).

### Domains cited

- reddit.com: 7
- github.com: 6
- guideflow.com: 6
- owasp.github.io: 6
- sourceforge.net: 6
- aws.amazon.com: 5
- blog.secureflag.com: 5
- g2.com: 5
- gane.ai/index: 5
- portswigger.net: 5 (its own site)

### Pages cited

- https://reddit.com/r/cybersecurity/comments/1ip5cke/what_platform_do_you_use_to_train_developers_on: 7
- https://guideflow.com/blog/application-security-training: 6
- https://blog.secureflag.com/2026/09/25/best-secure-coding-training-platforms: 5
- https://owasp.github.io/DevSecOpsGuideline/1-People/1-2-Training/1-2-1-Secure-coding: 5
- https://portswigger.net/web-security: 5
- https://github.com/ransomleak/training-application-security: 4
- https://ransomleak.com/blog/best-secure-coding-training-2026: 4
- https://securecodewarrior.com/plans: 4

## In its own words

What PortSwigger Web Security Academy's own pages state, read 2026-10-05. Stated by the vendor, not checked by the index.

- Positioning: Learn about vulnerabilities first-hand, online. (https://portswigger.net/)
- For: practitioners (https://portswigger.net/)
- Price stated: free (https://portswigger.net/customers)
- Free plan or trial: free (https://portswigger.net/customers)
- Certifications: GDPR, ISO 27001
- Hosting: Ireland, UK, US
- Customers named: Amazon, AXA Mansard, Auto Trader, Barclays, Danske Bank, Expedia Group, FedEx, NASA

## What it publishes

Every page portswigger.net exposes, read 2026-10-05: 3080 addresses. By kind, pages and the last 90 days:

- blog: 342 pages, 6 in the last 90 days, latest 2026-08-12
- case study: 22 pages, 0 in the last 90 days, latest undated
- webinar or virtual event: 8 pages, 0 in the last 90 days, latest 2025-09-24
- conference or event: 1 pages, 0 in the last 90 days, latest undated
- report or ebook: 159 pages, 5 in the last 90 days, latest 2026-09-23
- comparison: 7 pages, 0 in the last 90 days, latest undated
- template or tool: 125 pages, 0 in the last 90 days, latest undated
- glossary or explainer: 1 pages, 0 in the last 90 days, latest undated
- news or press: 13 pages, 0 in the last 90 days, latest undated
- Recent: 2026-09-23 report or ebook: Http3 in burp suite https://portswigger.net/research/http3-in-burp-suite
- Recent: 2026-08-25 report or ebook: Whats in a tag name javascript apparently https://portswigger.net/research/whats-in-a-tag-name-javascript-apparently
- Recent: 2026-08-12 blog: Can ai invent new attack techniques new research from james kettle and portswigger research https://portswigger.net/blog/can-ai-invent-new-attack-techniques-new-research-from-james-kettle-and-portswigger-research
- Recent: 2026-08-06 report or ebook: CSS:the bomb inside your inbox https://portswigger.net/research/css-the-bomb-inside-your-inbox
- Recent: 2026-08-05 report or ebook: Can ai do novel security research https://portswigger.net/research/can-ai-do-novel-security-research
- Recent: 2026-08-05 report or ebook: Crlf powered desync attacks https://portswigger.net/research/crlf-powered-desync-attacks

## Record

- Method: https://www.gane.ai/index/it/methodology
- License: CC BY 4.0. Cite as Gane Index, November 2026 Edition, www.gane.ai/index/it.