I will perform web and API penetration testing with detailed report

Is your website or API actually secure or just assumed to be?

I'm a Cyber Security student and independent security researcher who finds and reports real vulnerabilities for a living not someone who runs an automated scanner and calls it a "pentest."

I hold a credited CVE for a real-world vulnerability I discovered and responsibly disclosed, along with multiple published High-severity security advisories for open-source projects through coordinated disclosure. Alongside my research work, I'm part of a CTF team ranked #1 in Pakistan, with several national-level tournament wins under our belt.

What I offer:

Manual web application & API penetration testing (OWASP Top 10 & API Top 10)

SQL Injection, XSS, SSRF, IDOR, Auth Bypass, Race Conditions, Business Logic Flaws

Clear, actionable reports with severity ratings (CVSS) and remediation guidance

Genuine manual testing not a repackaged automated scan

I'm early in my journey as a freelancer here on Fiverr, but the skills behind this gig are proven through real disclosed vulnerabilities, published research, and consistent results in competitive security not just certificates or claims.