PortSwigger Research
portswigger.net
Actively hiring
Penetration Testing
Cybersecurity
Application Security
As featured in
View 2 jobs
Follow
Overview
News
Technologies
Salaries
Products
People
Growth
Offices
Jobs
Financials
Funding and backers
Latest round
Venture round
Jun 2026 · 3 mo ago
Hiring now
4
+2 posted in 30 days
The money's age
Fresh money
3 months since the last round · and hiring
Momentum
55/100
hiring for its size, in the news, fresh money
Last sign of life
this month
a posting or a news item
The story so fareach stage dated by its source: the company's releases, the press, registers, filings
Jun 17
Raised a round Venture round
Dec 18, 2025
Raised a round Venture round
May 9, 2025
Raised a round Venture round
Apr 16, 2024
Raised a round Venture round
Feb 2, 2023
Raised a round Venture round
Feb 10, 2022
On the Hacker News front page Web hacking techniques of 2021 · 567 points
Dec 6, 2021
On the Hacker News front page uBlock, I exfiltrate: exploiting ad blockers with CSS · 270 points
Aug 5, 2021
On the Hacker News front page HTTP/2-exclusive threats caused by implementation flaws and RFC imperfections · 393 points
Sep 13, 2020
On the Hacker News front page Researchers exploit HTTP/2, WPA3 protocols to stage ‘timeless timing’ attacks · 241 points
Tractionpublic signals, read monthly
Web presence
top 0.01%
of 133.2M domains by links, Common Crawl
Hacker News stories
639
best: 567 points
Funding rounds
| Round | Date | Amount | Investors | Source |
|---|---|---|---|---|
| Venture round | Jun 2026 | — | — | find-and-update.company-information.service.gov.uk |
| Venture round | Dec 2025 | — | — | find-and-update.company-information.service.gov.uk |
| Venture round | May 2025 | — | — | find-and-update.company-information.service.gov.uk |
| Venture round | Apr 2024 | — | — | find-and-update.company-information.service.gov.uk |
| Venture round | Feb 2023 | — | — | find-and-update.company-information.service.gov.uk |
Investors in similar startupsfunds that back the companies most like this one
Similar startupsby what they do, their industry and backers
Seezo is an AI-native application security company that helps engineering and AppSec teams perform contextual, explainable, and…
ZeroPath applies artificial intelligence agents to application security testing, reasoning about code the way a human auditor would…
Discover the Inspectiv mission: managing impactful vulnerabilities before exploitation. A seasoned team offers continuous manual testing…
Headquartered in San Francisco, California, Depthfirst is an AI-native application security company providing software risk detection and…
Merito delivers DevSecOps consulting, application security, quality engineering, SAP testing and upgrades, training, and managed services…
Identify and remediate vulnerabilities with continuous security testing and real-time penetration testing. Hackers don.
News
CSS:the bomb inside your inbox
Gareth Heyes - [email protected] - @garethheyes It's quite common for webmail clients to render untrusted CSS in a trusted UI. They attempt to make this safe using CSS sanitization. In this
Read more
Report
Can AI do novel security research? Meet the HTTP Terminator
Abstract We all know AI can find bugs. After a decade of research, I asked a harder question: can an autonomous system invent new attack techniques, and use them to hack live websites at scale? Buildi
Read more
Report
The Fragile Lock: Novel Bypasses for SAML Authentication
TLDR This post shows how to achieve a full authentication bypass in the Ruby and PHP SAML ecosystem by exploiting several parser-level inconsistencies: including attribute pollution, namespace confusi
Read more
Report
Cookie Chaos: How to bypass __Host and __Secure cookie prefixes
Browsers added cookie prefixes to protect your sessions and stop attackers from setting harmful cookies. In this post, you'll see how to bypass cookie defenses using discrepancies in browser and serve
Read more
Report
Inline Style Exfiltration: leaking data with chained CSS conditionals
I discovered how to use CSS to steal attribute data without selectors and stylesheet imports! This means you can now exploit CSS injection via style attributes! Learn how below: Someone asked if you c
Read more
Report
HTTP/1.1 must die: the desync endgame
Abstract Upstream HTTP/1.1 is inherently insecure and regularly exposes millions of websites to hostile takeover. Six years of attempted mitigations have hidden the issue, but failed to fix it. This p
Read more
Report
PortSwigger Research Sheds Light on HTTP/1.1 Vulnerabilities, Urges Industry Shift Toward Safer Protocols
Read more
Report
Drag and Pwnd: Leverage ASCII characters to exploit VS Code
Control characters like SOH, STX, EOT and ETX were never meant to run your code - but in the world of modern terminal emulators, they sometimes do. In this post, I'll dive into the forgotten mechanics
Read more
Report
Welcome to the next generation of Burp Suite: elevate your testing with Burp AI
At PortSwigger, we believe AI has the power to transform penetration testing - not by replacing human testers, but by augmenting them. With the release of Burp Suite Professional 2025.2, we're introdu
Read more
Report
Top 10 web hacking techniques of 2024
Welcome to the Top 10 Web Hacking Techniques of 2024, the 18th edition of our annual community-powered effort to identify the most innovative must-read web security research published in the last year
Read more
Report
Show more news
Tech stack
Technologies named in job postings at PortSwigger Research over the last 12 months, by layer, with the share of postings for each.
Technologies in use
17
Postings analysed
6
Stack modernity
76/100
Languages
Python
SQL
Databases
Amazon Redshift
Cloud & platforms
AWS
Azure
GCP
Kubernetes
Sign in to see how your skills match this stack
Sign In
Full PortSwigger Research tech stack
17 technologies · by team · pay by technology · changes · similar stacks
Growth
Hiring Momentum
65/100
Growing
Open positions
4
1 opened / 0 closed in 30 days
Median time-to-fill
90 days
faster than 15% of the market
ATS activity
Every ~6 hours
Today
Hiring Dynamics
+100%
Hiring Focus
The percentage next to each role is its share of the company's job openings over the last 90 days; the arrow shows the shift versus the previous period.
Product
33% ▲
Operations
33% ▲
Solutions
33% ▲
Activity Timeline
Added Linux to stack
Sep 2026
Added Machine Learning to stack
Sep 2026
Added X (Twitter) to stack
Sep 2026
Added Model Context Protocol to stack
Sep 2026
Added LinkedIn to stack
Sep 2026
Added Discord to stack
Sep 2026
Added Agentic Workflows to stack
Sep 2026
Added AI Agents to stack
Aug 2026
Offices
Where the company hires and what each office is for
Cities
1
Hiring now
1
Countries
1
Busiest office
Knutsford
Knutsford
United Kingdom
HQ
Company information
4 open roles 3 posted in 90 days
hires for Product, Sales, Operations
Registered address: 6 Booths Park, Chelford Road, Knutsford, WA16 8ZS
Earlier presence
London, United Kingdom
Jobs
≈ $72k – $166k per year (Estimated) • In office • Full-Time • Knutsford
CI/CD
Cybersecurity
Burp Suite
Apply
Apply
Financials
Latest round
Venture - Series Unknown
Funding rounds
5