Browse categories
Explore
Fiverr Pro
English
$
USD
I will scan your company external attack surface and deliver a security report
Aymen D.
About this gig
See your company the way an attacker does. I map your external attack surface and deliver a clear, prioritized report your team can act on.
What I check:
- Subdomains and forgotten assets
- Open ports and exposed services
- Outdated software and known CVEs
- TLS/SSL and DNS misconfigurations (SPF, DMARC, DNSSEC)
- Leaked or exposed sensitive files
Tools: BBOT, Nmap, Nessus, plus manual verification to remove false positives.
You receive a PDF report with each finding ranked by severity and concrete remediation steps.
About me: security engineer with 15+ years in systems and cybersecurity, ISO 27001 Lead Auditor.
Important: I only scan domains you own or are authorized to test. Before any active scan I ask for proof of ownership (a DNS TXT record) and a signed authorization. Passive reconnaissance does not touch your servers.
Respect third-party rights
Please be aware that it is against Fiverr's policies for sellers to include themes, templates, or any other elements that infringe third-party rights or applicable laws in the delivered work. Read more about in our Guide to Responsible Digital Creation.
Get to know Aymen D.
Aymen D.
Security Engineer and Full Stack Developer
- FromFrance
- Member sinceOct 2026
- Avg. response time1 hour
Languages
Arabic, French, English
Security engineer with 15+ years in systems, networks and cybersecurity (ISO 27001 Lead Auditor, RHCSA), and full stack developer. I build web apps with FastAPI, React and MongoDB, Android apps with React Native Expo or Kotlin, and I assess companies' external attack surface with BBOT and Nessus. Security is built into everything I deliver. Arabic, French and English.
My Portfolio
FAQ
Will the scan disrupt my website or services?
No. Passive recon does not touch your servers. Active scans are rate-limited and scheduled with you to avoid any impact.
Why do you need proof of domain ownership?
Scanning systems without permission is illegal. A DNS TXT record and a signed authorization protect both of us.
Is this a full penetration test?
No. It is an external exposure assessment. I do not exploit vulnerabilities; I identify and prioritize them with fixes.
