Collaborate Disseminate
Enterprise security teams are under more pressure than ever to secure sprawling application estates, without slowing down delivery. That’s why, over the first half of 2025, we’ve delivered some of our Continue reading The year so far: How Burp Suite DAST is leveling up enterprise security in 2025
In a brand-new collaboration between ethical hacking and AppSec expert John Hammond and world-renowned security researcher James Kettle, the pair explore how tens of millions of websites are compromis Continue reading “The entire internet is broken”: ethical hacking expert John Hammond meets James Kettle
At Black Hat USA and DEFCON 2025, PortSwigger’s Director of Research, James Kettle, issued a stark warning: request smuggling isn’t dying out, it’s evolving and thriving. Despite years of defensive ef Continue reading HTTP/1.1 Must Die: What This Means for AppSec Leadership
At Black Hat USA and DEFCON 2025, PortSwigger’s Director of Research, James Kettle, issued a stark warning: request smuggling isn’t dying out, it’s evolving and thriving. Despite years of defensive ef Continue reading HTTP/1.1 Must Die: What This Means for In-House Pentesters
At Black Hat USA and DEFCON 2025, PortSwigger’s Director of Research, James Kettle, issued a stark warning: request smuggling isn’t dying out, it’s evolving and thriving. Despite years of defensive ef Continue reading HTTP/1.1 Must Die: What This Means for Bug Bounty Hunters
At Black Hat USA and DEFCON 2025, PortSwigger’s Director of Research, James Kettle, issued a stark warning: request smuggling isn’t dying out, it’s evolving and thriving. Despite years of defensive ef Continue reading HTTP/1.1 Must Die: What This Means for Contract Pentesters and MSSPs
The Hidden Threat That’s Slipping Past Your Security HTTP request smuggling remains one of the most dangerous yet frequently overlooked web vulnerabilities today. Despite being a widely known issue si Continue reading The Desync Delusion: Are You Really Protected Against HTTP Request Smuggling?
Ever wondered how attackers can compromise modern websites by exploiting invisible cracks in HTTP infrastructure to win big bounties? In his latest video, NahamSec walks through the basics of request Continue reading HTTP Request Smuggling Explained: with seasoned bug bounty hunter NahamSec and world-class researcher James Kettle
Shifting security left promises faster, safer software delivery – but for many teams, that promise is undercut by painful scan performance, false positives, and pipeline friction. In our recent webina Continue reading Watch the on-demand webinar: Shift left without the strain
Las Vegas. August. Protocols are getting torn apart. This summer, PortSwigger returns to Black Hat USA and DEF CON 33 with a host of new talks, events and ways to meet PortSwigger and the the teams be Continue reading PortSwigger at Black Hat & DEF CON 33