Browse categories
Explore
Fiverr Pro
English
$
USD
I will do web application penetration testing and vulnerability assessment
Arslan
About this gig
Find and validate vulnerabilities in your website, web app, API, or server with evidence, real severity, and clear remediation guidance.
I combine automated discovery with manual validation of significant findings (Standard & Premium) to separate real issues from false positives.
WHAT YOU GET
Automated vulnerability discovery
Manual validation of significant findings (Standard & Premium)
CVSS-based severity assessment, where applicable
Evidence (screenshots / proof-of-concept)
Practical remediation recommendations
Structured, actionable report
MY APPROACH
1. Confirm scope and authorization
2. Automated discovery
3. Controlled manual validation
4. Severity assessment and evidence capture
5. Clear reporting with remediation guidance
SCOPE
One defined authorized target per engagement: a web application, API, or single server.
NOT INCLUDED
No destructive testing, unauthorized targets, remediation implementation, compliance claims, or guarantees of 100% security. No exploitation beyond proof-of-concept.
REVISION
1 revision = a clarification/correction to the report within scope. Not a retest after changes.
Respect third-party rights
Please be aware that it is against Fiverr's policies for sellers to include themes, templates, or any other elements that infringe third-party rights or applicable laws in the delivered work. Read more about in our Guide to Responsible Digital Creation.
Get to know Arslan
Arslan
Penetration Tester
- FromPakistan
- Member sinceAug 2025
- Avg. response time1 hour
Languages
English, German, Spanish
I help businesses find and validate security vulnerabilities evidence, real severity, and remediation guidance you can act on.
Currently a Penetration Tester at the National Cyber Crime Investigation Agency (NCCIA), with SOC and GRC Analyst experience.
Services: Vulnerability Assessment • OWASP Testing • Website Vulnerability Assessment • Vulnerability Scanning
Tools: Burp Suite, Nmap, SQLmap, Metasploit, Kali Linux. ISO/IEC 27001:2022 Lead Auditor certified.
Every engagement starts with confirming authorization. Message me before ordering, happy to help you pick the right service.
My Portfolio
FAQ
Q: What's the difference between vulnerability scanning and a vulnerability assessment?
A: Vulnerability scanning uses automated tools to identify potential issues. This assessment goes further: Standard and Premium manually validate significant findings and provide evidence, severity assessment, and remediation guidance.
Q: Can you test a website, web application, API, or server?
A: Yes. This gig covers one defined authorized target: a website/web application, an API, or a single server. The exact scope is agreed before testing begins.
Q: Why should I choose you over a seller with hundreds of reviews?
A: You get direct attention and careful manual validation, not an automated rush job, plus a report built for your specific target, not a template. Message me and I'll walk you through my approach before you commit.
Q: What do you need from me to start?
A: Your target (URL, IP, or app details), confirmation that you own it or have authorization to test it, and any relevant constraints or areas of concern.
Q: Will testing affect my live application?
A: Testing is controlled and non-destructive. I do not perform denial-of-service testing or other testing intended to disrupt your live environment.
Q: Will you exploit vulnerabilities you find?
A: Only as much as needed to confirm a finding through controlled proof-of-concept testing. I do not perform destructive exploitation or go beyond what is necessary to validate the finding.
Q: What's the difference between the packages?
A: Basic provides automated discovery with analyst review. Standard adds manual validation, evidence, severity and remediation guidance. Premium adds deeper coverage on the same target plus a consultation call.
Q: What does a revision include?
A: A revision is a clarification or correction to the delivered report within the original scope. It does not include retesting after you make changes to your system.
Q: Can you test multiple applications or a whole network?
A: Each package covers one defined target. Additional applications, servers, or other assets can be separately scoped and priced. Message me first if you need multiple targets assessed.
