PortSwigger BSCP

Exam cost

$99 USD (historical estimate)

Questions · time · passing score

4 hours, 2 applications with deliberate vulnerabilities, 3 stages per application (access user account, access admin interface, read /home/carlos/secret). Open book.

Prerequisites

To undertake the certification exam, candidates need access to an active subscription of Burp Suite Professional. While there are no formal experience or educational prerequisites, PortSwigger strongly advises candidates to work through their Web Security Academy labs, which are provided free of charge. This preparation helps ensure candidates possess an in-depth knowledge of a wide range of vulnerability classes and the Burp Suite functionality required for discovery, understanding, and exploitation 2.

Estimated salary premium

Not established by comparable evidence

Renewal requirements

5-year cycle · CPE/CEU requirement not verified

Difficulty

Not rated

Domains covered

• ** Deep knowledge of web vulnerability classes
• Exploitation techniques for various web vulnerabilities (e.g.
• XSS
• SQL injection
• CSRF
• XXE
• Directory Traversal
• SSRF)
• Proficiency in using Burp Suite Professional for web penetration testing
• Reconnaissance and discovery skills in web environments
• Ability to identify and exploit vulnerabilities in web applications
• Understanding of security impact and turning vulnerabilities into high-severity exploits

Where this credential fits

MyCyberPath career mappings are planning guidance, not universal employer requirements.

This credential is not currently mapped to a metro line.

Recent catalog changes

No recent changes are recorded for this credential.

Sources and verification

No reviewed source links are attached. Confirm current requirements with the issuer.