Browse categories
Explore
Fiverr Pro
English
$
USD
I will perform a manual security audit of your web app or API
Junior Penetration Tester Web API and Android Security Testing
I'm a junior penetration tester with hands-on experience testing Android, iOS, web apps, and APIs for security vulnerabilities. CAPT-certified by Hackviser and pursuing a BSCS, I use tools like Burp S...
About this Gig
I'll manually test your web application or API for real security vulnerabilities the kind that could actually be exploited, not just an automated scanner report.
What I test for:
Authentication & session management flaws
Broken access control / IDOR
API authorization, rate-limiting, and input validation issues
Business logic flaws
Common OWASP Top 10 and API Security Top 10 vulnerability classes
What you get:
A clear, professional report with reproduction steps, severity rating, and remediation guidance for every finding
Direct, plain-language communication I'll explain technical findings clearly, not just hand you jargon
A trustworthy second pair of eyes before your app or API goes live
About me:
I'm a Certified Associate Penetration Tester (CAPT Hackviser) with hands-on experience testing web applications and APIs professionally, using tools like Burp Suite and Postman.
️ Please note: I only test targets you own or have explicit written authorization to test. I'll ask you to confirm this before starting any work.
Message me before ordering if you're unsure which package fits your project happy to guide you to the right scope.
Testing application:
Other
Development technology:
Java
•
JavaScript
•
Node.js
•
PHP
•
Python
Device:
PC
FAQ
Do I need to give you access to my live/production system?
No — I strongly recommend testing on a staging or test environment. If only production is available, we'll agree on safe testing boundaries beforehand.
What do I need to provide before you start?
A URL or API documentation/Postman collection, test account credentials if login is required, and written confirmation that I'm authorized to test the target.
What if you don't find any vulnerabilities?
You'll still receive a full report confirming what was tested and the security controls that held up — that's valuable proof for clients, stakeholders, or compliance needs.
