Browse categories
Explore
Fiverr Pro
English
$
USD
I will perform web application penetration testing
I Build Secure Web Apps and Security Tools, AppSec Testing, Google Cloud and AWS
I'm an IT graduate specializing in application security and secure software development. I build custom security tools, websites, and applications, then test them from the ground up. Core work: Securi...
About this Gig
I help businesses find and fix security vulnerabilities in their web applications before attackers do.
As an AppSec engineer and Purple Team practitioner, I test applications using the OWASP Top 10 framework, the same standard used by security teams worldwide. I do not just run automated scanners and hand you a generic PDF. I manually test your application, verify every finding to eliminate false positives, and explain each vulnerability in plain language along with how to fix it.
What I test for: SQL injection and other injection flaws, broken authentication and session management, cross-site scripting (XSS), broken access control, security misconfigurations, sensitive data exposure, API vulnerabilities, and business logic flaws.
What you get: a clear report with each finding rated by severity (critical, high, medium, low), proof of concept for how it was found, and remediation steps your developers can act on immediately.
I test in isolated, controlled conditions and only with your explicit authorization. All findings are kept fully confidential.
Message me before ordering if your application has unusual authentication or you want a custom scope.
Testing application:
Web application
Development technology:
HTML & CSS
•
JavaScript
•
PHP
•
Python
•
SQL
Device:
PC
•
Mac
•
Linux
My Portfolio
FAQ
Question 1: Will this affect my live website or cause downtime?
I test carefully to avoid disruption, but for production sites, I recommend testing during low-traffic hours or on a staging environment if available. I will discuss this with you before starting.
Question 2: Do you need login credentials?
For authenticated testing, which finds more vulnerabilities, yes, I will need test account credentials. Unauthenticated testing is also available but finds fewer issues.
Question 3: What if you find a critical vulnerability?
I will notify you immediately, not wait until the final report, so you can start fixing it right away.
Question 4: Do you provide a written authorization form?
Yes, I can provide a simple authorization document for you to sign before testing begins. This protects both of us.
Question 5: Can you retest after I fix the issues?
Yes, the Premium package includes retesting, and other tiers can add it as an add-on.
