I will perform web app pentesting and a security audit
About this Gig
I will test your web application ethically, and with your authorization and give you a report your developers can actually act on.
What I test for:
- OWASP Top 10 (injection, XSS, SSRF, access control, etc.)
- Authentication & session management flaws
- Business logic vulnerabilities
- API security REST & GraphQL
- Attack surface & parameter/endpoint discovery
You always get:
- Findings ranked by severity (CVSS)
- Clear proof-of-concept for each issue
- Actionable recommendations to mitigate the vulnerability
️
Testing is performed only on applications you own or are explicitly authorized to test. Written authorization is required before any work begins.
- Basic: up to 5 pages or endpoints, no authentication.
- Standard: up to 15 pages or endpoints, 1 user role.
- Premium: up to 30 pages or endpoints, 2 roles, includes API and retest.
Testing application:
Web application
Development technology:
.NET
•
HTML & CSS
•
JavaScript
•
Node.js
•
PHP
Device:
PC
•
Mac
•
Linux
FAQ
Will testing break my site?
I use non-destructive techniques by default.
Which package do I need?
Basic: up to 5 pages or endpoints, no authentication. Standard: up to 15 pages or endpoints, 1 user role. Premium: up to 30 pages or endpoints, 2 roles, includes API.
Do you provide a retest?
Yes, retesting of fixes is included in the Premium package.
Is this legal?
Yes. I only test applications you own or are authorized to test, and I require written authorization before starting.

