Browse categories
Explore
Fiverr Pro
English
$
USD
I will perform owasp penetration testing and web app security audit
Python Automation Web Scraping Expert
Hi, I'm Thomas! I'm a Python developer specializing in web scraping, browser automation, and data pipelines. I help businesses turn manual processes into efficient automated workflows.
My expertise i...
About this Gig
s your live website or web app vulnerable to hackers? Find out before they do.
Launching a web app or SaaS without testing it against real-world attacks is a massive risk. I perform comprehensive Dynamic Application Security Testing (DAST) and OWASP Top 10 penetration testing on your live website, web app, or API to uncover exploitable security holes.
What I test on your live application:
- OWASP Top 10 Attacks: SQL Injection (SQLi), Cross-Site Scripting (XSS), CSRF, and command injection.
- Authentication & Sessions: Broken login flows, privilege escalation, IDOR, and insecure cookies/JWTs.
- API & Backend Security: Exposed endpoints, rate-limiting flaws, and sensitive data leaks.
- Server & Configs: Security headers, SSL/TLS issues, CORS misconfigurations, and open ports.
What you receive:
- A clear Vulnerability Assessment Report ranked by severity (Critical to Low).
- Proof-of-Concept (PoC) screenshots/steps showing how the flaw works.
- Actionable remediation advice so your dev team can patch fast.
Have a live URL or staging environment? Send me a message with your link before ordering for a free initial check!
Testing application:
Web application
Development technology:
HTML & CSS
•
JavaScript
•
Node.js
•
Python
•
React
Device:
PC
•
Mac
•
Linux
FAQ
Will this security test crash or harm my live website?
No! I use safe, non-destructive testing methods. However, for deep penetration testing (Standard/Premium), testing on a staging or test environment is always recommended if you have one.
What is the difference between your SAST and DAST gigs?
SAST analyzes your static source code from the inside. This gig (DAST) tests your running website or app from the outside—simulating how a real hacker attacks your live URLs and APIs.
Can you test behind a login wall (authenticated testing)?
Yes! In the Standard and Premium packages, I test both public pages and logged-in user/admin dashboards to check for privilege escalation and IDOR vulnerabilities.
