I will penetration test your website or web app with a fix ready security report


Over deze dienst
Your website looks fine from the outside. That is exactly what attackers count on.
I am a developer first and a security tester second, which means I do not just dump a scanner report on you. I test the way an attacker would, then explain every finding in plain language with the exact fix, because I write PHP, MySQL and Node.js code every day and know where real apps break.
WHAT I TEST
OWASP Top 10: SQL injection, XSS, CSRF, broken auth, IDOR
Login, password reset, session and token handling
APIs and hidden endpoints
File uploads, admin panels, access control
Server config, headers, SSL, exposed files and backups
Business logic abuse (price tampering, privilege escalation)
WHAT YOU RECEIVE
A clean PDF report: every issue rated Critical to Low, proof of concept, screenshots, and a step by step fix. Premium includes me patching the code and retesting until it is clean.
GROUND RULES
I only test sites you own or have written permission for. Testing is careful and non destructive. Everything stays confidential and is deleted after delivery.
Send me your URL and a short note about the stack and I will confirm scope before you order.
Respecteer de rechten van derden
Let erop dat het tegen het beleid van Fiverr voor freelancers is om thema's, templates of andere elementen in het geleverde werk op te nemen die inbreuk maken op de rechten van derden of toepasselijke wetten. Lees er meer over in onze Gids voor verantwoorde digitale creatie.
Maak kennis met Mohammed A
Full Stack Web and Mobile App Developer
- Afkomstig uitSaoedi-Arabië
- Lid sindsjul 2022
- Gem. reactietijd1 uur
Talen
Arabisch, Engels
Veelgestelde vragen
Will the testing break my live website?
No. I use safe, non-destructive techniques and never run denial-of-service or data-deleting tests. If you have a staging copy I will use that first.
What do you need from me to start?
The URL, written confirmation that you own it, and ideally a test user account. For Premium, access to the code repository or hosting so I can apply the fixes.
Is this a real manual test or just an automated scan?
Both. Scanners find the obvious things; I then test manually for logic flaws, access control and auth issues that scanners always miss. Every finding in the report is verified by hand.
