PortSwigger

@PortSwigger · UK · joined 22 May 2008

We are a leading provider of software and learning on web security. We make @Burp_Suite and @WebSecAcademy.

109 642Followers

23Following

4 489Posts total

31.9KViews on collected posts

Against accounts of the same size

12 posts from the last 90 days, next to the 100K–1M follower range. ordinary reach for its size, weaker reaction than most.

Median views1 680this account4 283median for 100K–1M

Reach, %1.53%this account1.68%median for 100K–1M

Engagement, %0.52%this account1.40%median for 100K–1M

Metric	This account	Median for 100K–1M	Ratio
Median views per post	1 680	4 283	0.39×
Reach (views ÷ followers)	1.53%	1.68%	0.91×
Engagement rate	0.52%	1.40%	0.37×

Others in this range → Compare with another account → How these benchmarks are built →

Growth & engagement

How the posts we collected actually performed: views and reaction rate post by post, what the audience did with them, and where the follower count goes.

Views per post

3.1K4 Aug

4.2K5 Aug

7.7K

974

1.1K

750

4.5K6 Aug

6.5K

2.3K

840

139 Aug

517 Aug

Last 12 collected posts, oldest on the left. The scale is logarithmic: one post can outrun the rest a hundred times over.

Engagement rate per post

0.39%4 Aug

0.38%5 Aug

0.75%

0.51%

0.56%

0.53%

0.45%6 Aug

0.76%

0.52%

0.83%

0.00%9 Aug

0.00%17 Aug

Reactions — likes, reposts, replies and quotes — divided by views. Median for 100K–1M accounts is 1.40%.

What the audience does

Likes66.7%152 in total

Reposts10.1%23 in total

Replies4.8%11 in total

Quotes1.3%3 in total

Bookmarks17.1%39 in total

Share of every reaction we collected for this account. Replies mean argument, reposts mean endorsement, bookmarks mean the post was worth keeping.

The follower curve appears once this account has two daily snapshots — we take one a day, and this one is on its first.

Latest posts

@PortSwigger @PortSwiggerRes @albinowax The interesting bit for us is not that AI found the bugs, it is the loop: hypothesis, probe, observe, refine. That is where novel technique comes from. Curious how much of the pipeline needed a human to say "this response is weird, dig here 5 views · 0 likes · 0 reposts · 0 replies 17 Aug 2026 · Open on X →

@PortSwigger @garethheyes The last two experiments of JWT cannot be completed according to the steps. Please make improvements. 13 views · 0 likes · 0 reposts · 0 replies 09 Aug 2026 · Open on X →

Responsible disclosure works: 2 Fastmail bugs fixed, bounties paid for both. If you build or secure anything that renders untrusted HTML/CSS, this isn't one to miss. Read the full white paper 👇 https://t.co/Rbxjq3neFQ 840 views · 7 likes · 0 reposts · 0 replies 06 Aug 2026 · Open on X →

What CSS alone can do: 💣 Brute-force login tokens from a URL, or run a real-time keylogger inside Outlook's own sanitiser 💣 Mutate "cleaned" CSS into live selectors that hijack clicks & deface UI 💣 Hide instructions from humans but not AI email agents, exfiltrating data 2.3K views · 11 likes · 0 reposts · 1 replies 06 Aug 2026 · Open on X →

New research: CSS: the bomb inside your inbox 💣 Debuting at Black Hat USA today, @garethheyes shows how "safe" CSS in Gmail, Outlook, Fastmail, ProtonMail, Yahoo & AOL Mail becomes a serious attack surface - no JavaScript required. #BHUSA #BlackHatUSA https://t.co/Un65ZnkiN 6.5K views · 37 likes · 10 reposts · 2 replies 06 Aug 2026 · Open on X →

We're ready for you BHUSA Day 2 🎩 What a day one - incredible to meet so many of you, and even better to hear how many are already using Burp AT. Huge congrats to our own @PortSwiggerRes @albinowax and @t0xodile, who took the stage to present brand new research. https://t.co/7 4.5K views · 14 likes · 4 reposts · 2 replies 06 Aug 2026 · Open on X →

This human-in-the-loop model is exactly what powers Burp AT, our agentic AI for pentesting - and this research is already shaping it. Full exploit chains, open-sourced tooling, and defensive guidance here: https://t.co/GJ5RNouc2D 750 views · 4 likes · 0 reposts · 0 replies 05 Aug 2026 · Open on X →

☠️ AI can do original security research, not just pattern-match known bugs ☠️ It found a genuine 0-day (now CVE-2026-63078) ☠️Its biggest discovery, "Shared-Parser Confusion," only surfaced once a human stepped back in. AI took it 90% of the way; human judgment found the rest 1.1K views · 5 likes · 0 reposts · 1 replies 05 Aug 2026 · Open on X →

He built the HTTP Terminator: an autonomous system that invented 30,000+ novel HTTP desync vectors, tested them on live sites (authorized via bug bounty programs), and weaponized the ones that worked. 974 views · 4 likes · 0 reposts · 1 replies 05 Aug 2026 · Open on X →

🚨 New from @PortSwiggerRes's James Kettle @albinowax At #BlackHatUSA today: can AI invent genuinely new attack techniques, not just find known bugs? Yes - and it compromised banks, government infrastructure, and an airport along the way. https://t.co/AoJT0UBcp6 7.7K views · 46 likes · 8 reposts · 2 replies 05 Aug 2026 · Open on X →

Day one of #BHUSA is here - come find us at booth #5342! Live demos, talks, and a lot of swag all day... https://t.co/y8LTVJ7DF7 4.2K views · 14 likes · 0 reposts · 1 replies 05 Aug 2026 · Open on X →

Good morning Vegas 😎 It's day two at @BSidesLV and we're raring to go! Yesterday was a great one - thanks to everyone who stopped by the PortSwigger stand, chatted with the team, and got hands-on with Burp AT's new agentic functionality. https://t.co/WMs9TM430E 3.1K views · 10 likes · 1 reposts · 1 replies 04 Aug 2026 · Open on X →