Browse categories
Explore
Fiverr Pro
English
$
USD
I will do manual web application penetration testing and vapt
Certified Ethical Hacker and Cyber Security Specialist
Hi, I’m Sohan Sardar — Certified Ethical Hacker, Penetration Tester, and Web Application Security Expert specialising in web malware removal and hacked website recovery.
I deliver high-quality work on...
About this Gig
Is your web application actually secure or just untested?
I perform manual, evidence-based security testing to find vulnerabilities that automated scanners miss. This is for startups, SaaS teams, and developers who need a real technical assessmentnot just a checklist.
What's Tested:
- OWASP Top 10 (SQLi, XSS, CSRF, SSRF, IDOR)
- Authentication & Authorization
- Session Security & Access Controls
- File-upload & Input-validation
- Security misconfigurations (SSL/TLS)
- API endpoints (Premium)
How I Test: Scope confirmation Recon Automated discovery Manual validation Safe PoC verification Risk classification. Testing is non-destructive with no data exfiltration.
What You Receive:
- Professional PDF report with CVSS ratings
- Evidence & reproduction steps
- Clear remediation guidance
- Retest included on Premium package
️ Important: Testing is performed only on systems, applications, APIs, and domains that you legally own or are explicitly authorized to test.
Message me your target URL and scope before ordering to confirm the right package!
FAQ
Is authorization required?
Yes. I only perform defensive testing on systems you legally own or are authorized to test. I will ask for verification.
Will this break my website?
No. I use safe, non-destructive methodologies. However, testing on a staging or pre-production environment is always highly recommended.
Do you just run an automated scanner?
Absolutely not. While automated tools are used for baseline reconnaissance, the core of Standard and Premium packages relies on manual validation to eliminate false positives and find logic flaws.
What is included in the report?
You receive an executive summary, methodology, finding descriptions, CVSS severity scores, safe Proof of Concept (PoC) steps, and specific remediation advice for developers.
Can you test APIs?
Yes, API endpoint security testing is included in the Premium package or available as a Gig Extra.
Do you test login and user dashboards?
Yes, if you provide test credentials, I can test authentication, authorization, and session management (IDOR, privilege escalation).
What is retesting?
After I deliver the report, your developers will fix the issues. If you purchase a retest, I will verify that the fixes were implemented correctly and update the report.
