Browse categories
Explore
Fiverr Pro
English
$
USD
I will do website penetration testing and vulnerability assessment
About this Gig
Website penetration testing and vulnerability assessment with a clear written report. I test your site the way an attacker would, then show you what is exposed and exactly how to fix it.
What's included:
- Reconnaissance and vulnerability scanning
- Manual testing aligned with the OWASP Top 10: SQL injection, XSS, broken authentication, insecure uploads
- WordPress checks: outdated plugins and themes, weak configuration, exposed files
- Report with findings ranked by severity, evidence, and step-by-step fixes
- Free retest after you apply the fixes (Premium)
How it works: we agree the scope in writing, I test, then I deliver the report and walk you through the findings in chat. Authorized testing only. I test sites you own or have written permission to test. No denial-of-service or destructive testing, and your findings stay confidential.
Message me your site URL and scope before ordering, and I'll confirm the right package.
FAQ
Do I need to give written permission?
Yes. I only test sites you own or are authorized to test. Before I start, you confirm authorization, and we agree on the scope (domains, testing window, exclusions) in writing in the order chat.
Which package should I choose?
Basic is a quick automated scan for obvious issues. Standard adds manual testing and a full report with fixes. Premium adds deeper manual review, a findings walkthrough and a free retest. Unsure? Message me first.
Will testing break or slow down my site?
I avoid denial-of-service and destructive tests and use controlled, non-disruptive methods. For live sites, we agree on a testing window, and a backup beforehand is recommended.
What do I receive at the end?
A written report with an executive summary, each finding ranked by severity, evidence, and step-by-step fixes. Premium includes a retest to confirm your fixes worked.
Do you test WordPress sites?
Yes. Alongside general web testing, I check WordPress-specific risks: outdated plugins and themes, weak configuration, exposed files, and login protections.
Can you fix the problems you find?
The report includes step-by-step fixes you or your developer can apply. If you need hands-on help, message me first and I'll confirm whether it fits a separate order.
Is my data kept confidential?
Yes. Findings and any access you share are used only for your test and are not shared. After delivery, remove any accounts you created for me.
Do you guarantee you'll find every vulnerability?
No honest tester can. Testing shows the risks found within the agreed scope and time, a snapshot of your security at that moment. New issues can appear after updates.
