Browse categories
Explore
Fiverr Pro
English
$
USD
I will audit and harden your website, API and linux vps security
Evgenii
About this gig
I provide security audits and hardening for websites, web apps, APIs, mobile backends and Linux/VPS servers.
I review code paths, configuration, access controls, logs and business flows, then validate findings manually. This is more than a plugin installation or scanner output.
Checks may include forms and uploads, server validation, rate limits, XSS and injection risks, CSP, sessions, CSRF, IDOR, role checks, open ports, SSH keys, firewall, updates, permissions, Fail2ban, webhooks and payment logic.
You receive evidence, priorities, scope limits, fixes, retesting, regression checks and a rollback plan.
Case: an online store received spam orders containing JavaScript and HTML strings. I deployed defensive changes, restored forms, verified CSRF rejection, invalid-input handling and rate limits, and reviewed SSH access. An unknown authorized key was removed. The attacking strings were confirmed, but successful XSS or server-code execution was not established; historical logs were incomplete.
Work is only performed on systems you own or may legally test. No DDoS, brute force, phishing, malware or promise of absolute security. Contact me before ordering to define scope.
Respect third-party rights
Please be aware that it is against Fiverr's policies for sellers to include themes, templates, or any other elements that infringe third-party rights or applicable laws in the delivered work. Read more about in our Guide to Responsible Digital Creation.
Get to know Evgenii
Evgenii
Web Designer and Frontend Developer
- FromArmenia
- Member sinceOct 2026
- Avg. response time1 hour
Languages
Russian
I design and build responsive websites and take projects through the full product cycle: research, structure, UI design, development, integrations, testing, launch, and basic SEO. I work with Figma, Tilda, HTML, CSS, and JavaScript. For coded projects, I can prepare a server, connect a domain, configure deployment, and apply baseline security settings. I also handle targeted website improvements, banners, Excel or CSV data cleanup, and small Python scripts. I define the scope before starting and test the result on desktop and mobile devices.
My Portfolio
FAQ
Is this a penetration test?
This is an authorized defensive assessment. I use passive and low-impact checks within the agreed scope. I do not perform destructive testing, DDoS, phishing, malware, credential theft or unauthorized access.
What do you need before the audit?
I need the target URL, written confirmation that you own or may test it, the agreed scope, technology stack, excluded systems, and safe staging or test access when required.
Do you guarantee complete security?
No. The audit reduces identified risks within the agreed scope and time window. I document what was tested, evidence, limitations and remaining risks, but no audit can guarantee protection from every future attack.
What counts as an included fix and retest?
An included fix is an agreed code or configuration change within the package limits. I retest the issue and key business flow. New components, migrations, unrelated findings or extra systems need a custom offer.
