Browse categories
Explore
Fiverr Pro
English
$
USD
I will perform web application penetration testing and vapt report
VAPT Specialist , Application Security, SOC Analyst
I'm Niyaz, a cybersecurity practitioner specializing in Ethical Hacking, VAPT, App Security, and SOC/Threat Hunting — trained via PGD in Cyber Security and the full EC-Council CEHv13 curriculum.
What...
About this Gig
I provide professional web application penetration testing and vulnerability assessment (VAPT), combining automated scanning with manual testing to find real, exploitable issues not scanner noise.
WHAT I TEST FOR:
- OWASP Top 10 (SQLi, XSS, CSRF, IDOR, Broken Auth, Misconfig, more)
- Authentication and session management flaws
- Information disclosure and misconfigured security headers
- Business logic vulnerabilities
WHAT YOU GET:
- Clear report, every finding rated by CVSS severity
- Proof-of-concept per vulnerability (screenshots/steps to reproduce)
- Practical, prioritized remediation guidance
- Confidential handling of all findings
TOOLS: Burp Suite, OWASP ZAP, Nmap, Nikto, SQLmap, manual testing.
BACKGROUND: Completing a Post Graduate Diploma in Cyber Security; independently studied the full EC-Council CEHv13 curriculum through self-directed learning, practicing the complete pentest lifecycle recon to reporting on lab environments.
AUTHORIZATION REQUIRED: I only test systems you own or have explicit written permission to test. Please confirm this before we start it protects both of us.
Different scope in mind? Message before ordering to discuss a custom plan.
FAQ
Q: Do I need to give you login access to my website?
Only if you want authenticated testing (testing what a logged-in user can do). For unauthenticated testing, no login access is needed. Just let me know your preference in the requirements form after ordering.
Q: Will testing break or slow down my live website?
I use careful, controlled testing techniques to minimize risk, but any security testing carries some inherent risk to a live system. For business-critical sites, I recommend testing on a staging/clone environment if one is available.
Q: What if you don't find any vulnerabilities?
You still receive a full report confirming what was tested and the methodology used — this is valuable proof of your site's security posture, useful for clients, investors, or compliance purposes.
Q: Can you test mobile apps or only websites?
Yes, I can do. But this gig is focused on web applications. For mobile app or network security testing, please message me first to discuss scope and pricing.
Do you sign an NDA?
Yes, happy to sign an NDA before starting if you require one — just send it over after purchase or before ordering.
