Browse categories
Explore
Fiverr Pro
English
$
USD
I will perform devsecops security testing using trivy and sonarqube
Helping companies manage and secure cloud infrastructure
Looking for an expert DevOps Engineer to scale your infrastructure? With 5+ years of experience, I build secure, automated cloud infrastructure and manage production environments using EC2, S3, EKS, I...
About this Gig
Secure your application before it reaches production.
I provide DevSecOps security testing to identify vulnerabilities in your source code, dependencies, containers, and application before deployment.
My assessment includes:
Static Application Security Testing (SAST)
Software Composition Analysis (SCA)
Dynamic Application Security Testing (DAST)
Container Security Scanning
Docker Image Vulnerability Assessment
Dependency & CVE Analysis
Secret & Misconfiguration Detection
API Security Review
Tools I work with:
- SonarQube
- Trivy
- OWASP ZAP
- GitHub Security Scanning
You'll receive a professional security report with identified vulnerabilities, severity classification, affected components, and practical remediation recommendations to improve your application's security before deployment.
Whether you're deploying a web application, REST API, Docker container, or CI/CD pipeline, I'll help you reduce security risks and strengthen your software delivery process.
My Portfolio
Other DevOps Engineering Services I Offer
FAQ
1. What security testing do you perform?
I perform SAST, DAST, SCA, container security scanning, API security reviews, dependency analysis, vulnerability assessments, and configuration reviews before deployment.
2. Which technologies do you support?
I can assess applications built with common programming languages and frameworks, Docker containers, Kubernetes workloads, REST APIs, and CI/CD environments. Contact me if you're unsure whether your stack is supported.
3. Which security tools do you use?
I use tools such as SonarQube, Trivy, and OWASP ZAP, along with manual security review where appropriate.
4. Will you fix the vulnerabilities?
By default, I identify vulnerabilities and provide detailed remediation recommendations. If you also want assistance fixing the issues, please contact me before placing the order.
5. Will my source code remain confidential?
Yes. All code, repositories, reports, and project information are treated confidentially and are used only for the purpose of the security assessment.
6. What will I receive after the assessment?
You'll receive a professional report containing: Identified vulnerabilities Severity ratings Affected files or components Risk explanation Remediation recommendations Security best-practice suggestions
