Door categorieën bladeren
Ontdekken
Fiverr Pro
Nederlands
$
USD
I will run a full security scan on your website
Maaz S.
_zkc5ku.jpg)
Over deze dienst
External security scan of your website. Full report, fixes, and signed certificate.I run a full external security scan on your website and send you a PDF report of everything publicly exposed ranked by severity, with clear fixes.
Every scan covers:
SPF / DKIM / DMARC email misconfiguration
TLS/SSL weaknesses and expired certificates
Exposed subdomains and staging environments
Missing security headers (CSP, HSTS, X-Frame-Options)
Open redirects and .git exposure
Config leaks and 80+ additional checks
What you get:
PDF security report with severity scores
Remediation steps for every finding
Signed certificate (Standard and Premium tiers)
Nothing is touched on your live servers. All checks are non-destructive and passive no writes, no modifications, no risk.
Who this is for:
Founders, CTOs, and developers who need a clear picture of their external attack surface. Useful before a funding round, vendor review, enterprise contract, or compliance audit.
Credentials:
IBM Penetration Testing Badge (Credly verified)
DevShieldX Penetration Testing Internship (2026)
TechBiz Security CEH Internship (2026)
B.Sc. Computer Science,NEDUET
Founder of Pentest
Respecteer de rechten van derden
Let erop dat het tegen het beleid van Fiverr voor freelancers is om thema's, templates of andere elementen in het geleverde werk op te nemen die inbreuk maken op de rechten van derden of toepasselijke wetten. Lees er meer over in onze Gids voor verantwoorde digitale creatie.
Maak kennis met Maaz S.
Maaz S.
I'll run a professional security audit on your website
- Afkomstig uitPakistan
- Lid sindsdec 2024
- Gem. reactietijd1 uur
Talen
Urdu, Engels
Founder of PentestApp, a security scanning platform. I've scanned 1,500+ domains and built Bug Hunter Machine, a 22,000-line offensive automation engine.
I run external pentests on websites: SPF/DKIM/DMARC checks, TLS weaknesses, exposed subdomains, security headers, open redirects, .git exposure, and 80+ more.
You get a PDF report with severity scores, remediation steps, and a signed certificate.
Credentials: IBM Penetration Testing Badge, DevShieldX Pentest Internship (2026), TechBiz CEH Internship, B.Sc. CS from NED University.
Send me your domain — I'll show you what's exposed.
Mijn portfolio
Veelgestelde vragen
Q: Will the scan affect my live website or slow it down?
A: No. All checks are non-intrusive and passive. Nothing is written, modified, or deleted on your servers. The scan looks only at what's already publicly visible — DNS records, certificate data, HTTP response headers, and exposed services. Your site continues to run normally throughout.
Q: Do I need to give you access to my servers or admin panel?
A: No. The scan works entirely from the outside, the same way an attacker or a potential client would view your domain. You only need to give me the domain name. No credentials, no server access, no installation.
Q: How long does the delivery take?
A: Basic: 3 days. Standard: 2 days. Premium: 1 day. If your scan produces unusual findings that need extra verification, I'll message you before the deadline — no surprises.
Q: What exactly do I receive?
A: A PDF report listing every finding, ranked by severity (Critical → Info), with: The exact location of each issue Why it matters (business impact, not just jargon) Step-by-step remediation for each one A signed security certificate (Standard and Premium tiers)
Q: Can you fix the issues you find, or only report them?
A: This gig delivers the report and remediation steps — not the fixes. Most findings (missing SPF/DMARC, security headers, TLS config) are 10–30 minute fixes for your developer, and my report tells them exactly what to change. If you want me to make the fixes for you, message me first and I'll quote
Q: Is this legal? Do I need permission to scan my own site?
A: Yes, it's legal — as long as you own the domain. Before the scan starts, I verify ownership via a DNS record only you can add. This proves you control the domain and authorizes the scan. If you don't own the domain, don't order.
