I will do web application penetration testing with a full report

Pakistan

I speak Urdu, English

SVP Head Application Security and VAPT, Penetration Testing Expert

I lead Application Security and VAPT as SVP at a major bank, with over 13 years in cybersecurity and bug bounty hunting and over 8 years of professional penetration testing for banks and enterprises. ...
About this Gig

Your web application holds your customers data and your business reputation. A scanner alone will not protect it. I test the way a real attacker thinks, then explain every finding in plain language your developers can act on.


I am an SVP Head of Application Security and VAPT at a major bank, with over 13 years in cybersecurity and bug bounty hunting. I ranked in the HackerOne Top 100 for three consecutive years, I am a Synack Red Team member,

 and I have tested more than 1,000 applications. My certifications include eCPPT, CRTP, eWPTXv2 and CWASP.


What you get: manual and tool assisted testing based on the OWASP Top 10, covering authentication, access control, injection, business logic and session handling.

 Every finding comes with proof, severity, business impact and step by step remediation. Standard and Premium packages include a retest after your fixes.


Testing starts only after written scope and authorisation from the asset owner. Your data stays confidential and NDA is welcome. Message me before ordering with your application type and timeline, and I will confirm the right package for your scope.


Testing application:

Web application

Development technology:

Other

Device:

PC

•

Linux

My Portfolio