I will test your website for security vulnerabilities


About this gig
Is your website safe from common attacks? I will test your web application for real vulnerabilities and give you a clear report you can act on.
Hi, I'm Rahik, a Computer Science and Engineering undergraduate at (BUET) focused on web application security. I test manually using Burp Suite and Kali Linux, following the OWASP Top 10, and use automated scanners only to support manual checks.
What I check:
- SQL injection, XSS, command injection
- Authentication and session problems
- Access control issues (IDOR)
- Security misconfigurations
What you get:
- A clear PDF report: findings, severity, proof, and step-by-step fix advice
- A short summary that a non-technical person can read
- Free re-check of fixed issues (Standard and Premium)
Important: I only test websites you own or have written permission to test, strictly within the scope you give me.
Not sure which package fits? Message me your website type before ordering and I'll recommend one.
Respect third-party rights
Please be aware that it is against Fiverr's policies for sellers to include themes, templates, or any other elements that infringe third-party rights or applicable laws in the delivered work. Read more about in our Guide to Responsible Digital Creation.
Get to know Rahik
Web Application Security Tester And Vulnerability Analyst
- FromBangladesh
- Member sinceSep 2026
Languages
Bengali, English
My Portfolio
FAQ
Do you use automated tools or manual testing?
Both, but manual testing is the priority. I use tools within Kali Linux (like OWASP ZAP) to establish a baseline, but the core value of my service is the deep, manual, attacker-focused testing used to find vulnerabilities.
What do you need from me to start?
I just need the URL of the target web application and explicit written permission/authorization from you to perform the penetration test.
What is "explicit written permission" and why do you need it?
Ethical hacking requires strict authorization. Explicit written permission is simply a direct message from you, the application owner, legally authorizing me to perform penetration testing on your specific URL. This protects both of us and ensures all testing is 100% legal.
Will your penetration testing break or crash my live website?
No. I perform safe, non-destructive testing. While I actively test for vulnerabilities to verify if they are exploitable, I strictly avoid denial-of-service (DoS) attacks and will never alter or delete your live database records.

