Door categorieën bladeren
Ontdekken
Fiverr Pro
Nederlands
$
USD
I will find vulnerabilities in your web app and deliver a professional pentest report
Web Application Security Analyst
Professional penetration tester with hands-on experience conducting real-world web application security assessments under signed Rules of Engagement. Most recent engagement identified a Critical privi...
Over deze dienst
Is your web application secure? Find out before attackers do.
I provide professional web application penetration tests with a detailed findings report delivered based on your chosen package.
What you get:
- Expert security assessment covering OWASP Top 10 vulnerabilities
- Professional findings report with identified vulnerabilities, severity ratings, and evidence
- Clear remediation guidance for every finding
- Signed Rules of Engagement before any testing begins
What I test for:
- SQL injection, XSS, CSRF
- Authentication and session flaws
- Broken access control
- Security misconfigurations
- API vulnerabilities
Standard and Premium packages include in-depth testing, including business logic analysis and authenticated testing.
My credentials:
- CompTIA PenTest+, CySA+, Security+
- CTF competitor and open-source security tool developer
How it works:
- Place your order
- I'll collect your target scope and authorization details
- Testing begins once the scope is confirmed
- Report delivered within your package timeframe
Note: You must own or have written authorization to test the target. A signed authorization agreement is required before testing begins.
Testapplicatie:
API
Ontwikkelingstechnologie:
JavaScript
•
Node.js
•
PHP
•
Python
•
SQL
Apparaat:
PC
•
Linux
Veelgestelde vragen
Do I need to own the website to order this?
Yes. You must own the target or have written authorization to test it. A signed authorization agreement is required before any testing begins.
Will this break my website?
No. All testing is non-destructive. We do not use denial-of-service techniques or destructive payloads.
What if no vulnerabilities are found?
You still receive a full report confirming what was tested and what security controls are functioning correctly. A clean report has value too.
What information do I need to provide?
Your target URL, any in-scope subdomains, and confirmation that you own or are authorized to test the target.
