Browse categories
Explore
Fiverr Pro
English
$
USD
I will run a full security scan on your website
Maaz S.
_zkc5ku.jpg)
About this gig
External security scan of your website. Full report, fixes, and signed certificate.I run a full external security scan on your website and send you a PDF report of everything publicly exposed ranked by severity, with clear fixes.
Every scan covers:
SPF / DKIM / DMARC email misconfiguration
TLS/SSL weaknesses and expired certificates
Exposed subdomains and staging environments
Missing security headers (CSP, HSTS, X-Frame-Options)
Open redirects and .git exposure
Config leaks and 80+ additional checks
What you get:
PDF security report with severity scores
Remediation steps for every finding
Signed certificate (Standard and Premium tiers)
Nothing is touched on your live servers. All checks are non-destructive and passive no writes, no modifications, no risk.
Who this is for:
Founders, CTOs, and developers who need a clear picture of their external attack surface. Useful before a funding round, vendor review, enterprise contract, or compliance audit.
Credentials:
IBM Penetration Testing Badge (Credly verified)
DevShieldX Penetration Testing Internship (2026)
TechBiz Security CEH Internship (2026)
B.Sc. Computer Science,NEDUET
Founder of Pentest
Respect third-party rights
Please be aware that it is against Fiverr's policies for sellers to include themes, templates, or any other elements that infringe third-party rights or applicable laws in the delivered work. Read more about in our Guide to Responsible Digital Creation.
Get to know Maaz S.
Maaz S.
I'll run a professional security audit on your website
- FromPakistan
- Member sinceDec 2024
- Avg. response time1 hour
Languages
Urdu, English
Founder of PentestApp, a security scanning platform. I've scanned 1,500+ domains and built Bug Hunter Machine, a 22,000-line offensive automation engine.
I run external pentests on websites: SPF/DKIM/DMARC checks, TLS weaknesses, exposed subdomains, security headers, open redirects, .git exposure, and 80+ more.
You get a PDF report with severity scores, remediation steps, and a signed certificate.
Credentials: IBM Penetration Testing Badge, DevShieldX Pentest Internship (2026), TechBiz CEH Internship, B.Sc. CS from NED University.
Send me your domain — I'll show you what's exposed.
My Portfolio
FAQ
Q: Will the scan affect my live website or slow it down?
A: No. All checks are non-intrusive and passive. Nothing is written, modified, or deleted on your servers. The scan looks only at what's already publicly visible — DNS records, certificate data, HTTP response headers, and exposed services. Your site continues to run normally throughout.
Q: Do I need to give you access to my servers or admin panel?
A: No. The scan works entirely from the outside, the same way an attacker or a potential client would view your domain. You only need to give me the domain name. No credentials, no server access, no installation.
Q: How long does the delivery take?
A: Basic: 3 days. Standard: 2 days. Premium: 1 day. If your scan produces unusual findings that need extra verification, I'll message you before the deadline — no surprises.
Q: What exactly do I receive?
A: A PDF report listing every finding, ranked by severity (Critical → Info), with: The exact location of each issue Why it matters (business impact, not just jargon) Step-by-step remediation for each one A signed security certificate (Standard and Premium tiers)
Q: Can you fix the issues you find, or only report them?
A: This gig delivers the report and remediation steps — not the fixes. Most findings (missing SPF/DMARC, security headers, TLS config) are 10–30 minute fixes for your developer, and my report tells them exactly what to change. If you want me to make the fixes for you, message me first and I'll quote
Q: Is this legal? Do I need permission to scan my own site?
A: Yes, it's legal — as long as you own the domain. Before the scan starts, I verify ownership via a DNS record only you can add. This proves you control the domain and authorizes the scan. If you don't own the domain, don't order.
