BSCP — Burp Suite Certified Practitioner

The most respected web application security certification in the practitioner community — a 4-hour fully hands-on proctored exam with two multi-stage web application targets and absolutely no hints. PortSwigger Web Security Academy is the global standard learning resource for web hackers, and BSCP validates mastery of that entire curriculum. At $99 for the exam (requiring an active Burp Suite Pro license at $499/yr) it's exceptional value. If you can pass BSCP, employers know you can actually exploit web applications — it has become the benchmark signal for web security testing skill.

Issuer	PortSwigger
Level	intermediate
Domains	Offensive Security, Application Security
Practical weight	100%
Cost (USD)	99
Renewal	5 years
Skills	web_vulnerability_exploitation, burp_suite_advanced, authentication_bypass, sql_injection_advanced, xss_advanced, ssrf, xxe, deserialization_attacks, web_cache_poisoning, advanced_web_exploitation, prototype_pollution

Official certification page

Browse all 426 cybersecurity certifications on EBCertMap