Browse categories
Explore
Fiverr Pro
English
$
USD
I will review your lovable cursor or replit web app for security issues
Areeba Fayyaz
About this gig
Built a web app with Lovable, Cursor, Replit or Bolt? Check its security before launch.
Im Areeba, an eJPT-certified cybersecurity professional with 2+ years of enterprise experience in security operations, vulnerability management and web/API testing.
I will assess your agreed application scope for issues such as:
Broken authentication and access controls
Unauthorized access to other users data
Exposed secrets and sensitive information
Input-validation weaknesses
Security misconfigurations
You receive a report with:
Findings and severity ratings
Evidence and reproduction steps
Business impact
Practical remediation recommendations
Testing scope and limitations
Testing combines manual checks with relevant tools. This service covers assessment and reporting; code changes are not included. Premium includes one retest of reported findings.
Please message me before ordering so we can confirm your application, access requirements and scope. Testing requires authorization. A staging environment with test data is preferred.
This is a scoped assessment, not certification or a guarantee that an application is vulnerability-free.
Respect third-party rights
Please be aware that it is against Fiverr's policies for sellers to include themes, templates, or any other elements that infringe third-party rights or applicable laws in the delivered work. Read more about in our Guide to Responsible Digital Creation.
Get to know Areeba Fayyaz
Areeba Fayyaz
Cybersecurity Analyst, SOC, SIEM and API Security Specialist
- FromPakistan
- Member sinceMay 2024
- Last delivery2 years
Languages
Urdu, Hindi, English
SOC Analyst with hands-on enterprise experience—I help businesses detect, investigate, and respond to security threats—from SIEM alert triage to API vulnerability testing.
Certifications:
ISC2 Certified in Cybersecurity (CC)
Google Cybersecurity Professional Certificate
INE eJPT
INE Certified Cloud Associate
API Security Fundamentals
Core skills:
SOC monitoring & alert investigation
SIEM log analysis
Vulnerability management & VAPT
API security (OWASP API Top 10)
Python security automation
Not sure which package fits your needs? Message me before ordering and I'll help you scope it out.
My Portfolio
FAQ
What applications can you assess?
Web applications and APIs, including applications created using Lovable, Cursor, Replit and Bolt. Please describe your architecture before ordering so I can confirm suitability.
Do you test the AI model itself?
These packages assess the web application and API security. LLM red teaming, prompt-injection testing and model-safety evaluation are outside the standard scope.
Will you fix the vulnerabilities?
The packages include testing, reporting and remediation recommendations. Code changes are not included.
Do I need to share source code?
Not always. Many checks require only the agreed application URL and test accounts. Any source-code or configuration review must be agreed before ordering.
Can you test a live website?
We can discuss production testing, but staging with test data is preferred. We will agree on permitted actions, testing times and excluded functions first.
What if you find no vulnerabilities?
You will receive a report describing the scope, checks performed, observations and limitations. I do not invent findings or guarantee that every assessment will identify a vulnerability.
What counts as a revision?
A revision covers clarification or correction of the delivered report. Additional applications, endpoints, user roles or testing are a scope change.
What does the Premium retest include?
One verification round for the findings reported in the original assessment, within the agreed scope. It does not include testing newly added features.
