Browse categories
Explore
Fiverr Pro
English
$
USD
I will do a web application vulnerability assessment
About this Gig
Before attackers find your web app's weaknesses, I will. I run structured vulnerability assessments using OWASP ZAP and manual testing, aligned to the OWASP Top 10, to find real, exploitable issues not just a raw scan dump.
My background: cybersecurity graduate with hands-on SOC Analyst experience, so I understand both sides how attacks happen and how they get detected. I've conducted structured tests identifying XSS, SQL Injection, and authentication bypass vulnerabilities, with documented findings and proof-of-concept evidence.
What I offer:
- Automated + manual testing across OWASP Top 10 categories
- XSS, SQL injection, authentication and session vulnerabilities
- Proof-of-concept evidence for every finding
- Risk-rated findings (Critical / High / Medium / Low)
- Clear remediation guidance your developers can act on
- Final PDF report with executive summary
Authorization required: I only test systems you own or have written authorization to test. By ordering, you confirm you have permission. I do not test outside the agreed scope.
Message me your target before ordering so I can confirm the scope.
Device:
Desktop
•
Laptop
•
Mobile
Operating system:
Windows
•
Linux
•
Android
•
Ubuntu
My Portfolio
FAQ
Do I need to give you special access to my app?
No — I test as an external user would, though staging/test credentials help if the app requires login to reach key features.
Will you test my production site or should I provide a staging environment?
A staging/test environment is strongly preferred to avoid any risk to live data. If production is the only option, we'll agree on a testing window in advance.
What do I actually receive at the end?
A PDF report with every finding, proof-of-concept evidence, a risk rating, and clear remediation steps — plus a plain-language executive summary.
Can you test mobile apps or only web apps?
Web applications and APIs primarily. Message me if you have a different target, and I'll confirm if I can help.
Do you guarantee you'll find vulnerabilities?
I guarantee a thorough, methodical assessment — not every application has exploitable flaws, and a clean report is a valid (and valuable) outcome too.
