Browse categories
Explore
Fiverr Pro
English
$
USD
I will perform web penetration testing, vapt, and vulnerability assessment
Cybersecurity Specialist, Ethical Hacking Certified
Hi, I am Riyad Hasan, a Cybersecurity Specialist and Certified Ethical Hacker. I specialize in web security, vulnerability assessment, WordPress protection, malware analysis, and ethical OSINT researc...
About this Gig
Are you concerned about your website security or looking for professional website testing?
I provide authorized web penetration testing and VAPT (Vulnerability Assessment and Penetration Testing) to help identify security vulnerabilities before they can be exploited.
My pentest methodology combines automated discovery, manual validation, and security analysis based on the OWASP Top 10, OWASP Web Security Testing Guide, and OWASP API Security.
Services Included
- SQL injection and other injection vulnerabilities
- Cross-site scripting (XSS)
- Broken access control and IDOR
- Authentication and authorization issues
- Session management weaknesses
- CSRF and SSRF checks
- Sensitive data exposure
- Security misconfiguration
- Exposed files, endpoints, and configuration issues
- Workflow and business logic review
- Privilege escalation checks
- REST API security assessment
- API authentication and authorization testing
- Selected endpoint and parameter testing
What You Will Receive
- Executive security summary
- Detailed vulnerability findings
- Severity and risk rating
- Safe proof of concept and reproduction steps
- Clear report with remediation recommendations
Note: Please contact me before placing order.
FAQ
What is the difference between a vulnerability scan and a penetration test?
A vulnerability scan mainly uses automated tools to identify potential issues. A penetration test adds manual validation, access-control testing, authentication review, and business logic analysis, depending on the selected package.
Do I need authorization before testing?
Yes. Written confirmation that you own or are authorized to test the target is required before testing begins.
What deliverables will I receive upon completion?
You will receive a professional, executive-ready PDF report containing an executive summary, risk ratings (CVSS/severity), step-by-step Proof of Concepts (PoCs), impact analysis, and clear remediation guidance.
Do you fix the vulnerabilities discovered during the test?
Penetration testing focuses on identifying and documenting flaws. While I provide clear, code-level recommendations to help your development team apply patches, hands-on vulnerability fixing can be arranged as a separate service.
Is testing compliant with industry standards like OWASP and NIST?
Yes. All manual assessments follow structured methodologies based on the OWASP Web Security Testing Guide (WSTG) and relevant industry standards to ensure comprehensive test coverage.
How do you handle sensitive client data during and after testing?
Confidentiality is strictly maintained. Any logs, credentials, or client data gathered during the assessment are handled with strict privacy protocols and securely deleted once the order is finalized.
