I will threat intelligence your company to prevents breaches
Offensive Security Engineer
Vetted by Fiverr Pro
Eric L was selected by the Fiverr Pro team for their expertise.
Vetted for
Cybersecurity
About this Gig
Vetted Pro
Stop account takeovers and breaches before they start.
Your corporate credentials, secrets and brand may already be for sale on the dark web. Stealer logs, combolists and leaked identities are traded daily across cybercrime forums, Telegram channels and ransomware leak sites.
I'm Eric Labrador, Offensive Security Engineer with 6+ years of Red Team work for banks and regulated enterprises (OSCP, CRTO, CRTE, BSCP), DEF CON 34 speaker and author of open-source recon tools. I bring an attacker's eye to threat intel: detect, prioritize, remediate.
What you get:
- Dark & clear web exposure check: leaked credentials, stealer logs, secrets
- Lookalike domains & brand impersonation
- Attack surface mapping & orphan infrastructure
- Threat actor profiling
- Executive/VIP identity exposure check
- PDF report: evidence, risk score per finding, prioritized fixes
(Scope varies by package see the table)
Ideal for:
- Businesses preventing ATO and data breaches
- Security teams needing external visibility
- Executives worried about personal exposure
I only assess assets you own or are authorized to assess.
Portfolio: e1abrador.com. Order now or message me first.
Expertise:
Privacy
•
Awareness
•
Data Protection
My Portfolio
FAQ
What do I need to provide to get started?
Your domain(s), brand name, and — for VIP checks — the names/emails of the executives to assess.
Is this legal?
Yes. I only assess assets you own or are authorized to assess, and I source exposure data from licensed intelligence platforms and public OSINT — never by buying or handling stolen data. You get findings you can act on and defend in an audit.
What will I actually receive?
A PDF report with each finding, evidence, a risk score, and prioritized remediation steps. Scope depends on your package: from a single-domain exposure check (Basic) up to 5 domains, executive checks, and a strategic roadmap (Premium).
How is this different from just running Have I Been Pwned?
Free tools show old breach hits. I combine dark web, stealer-log, and Telegram intelligence with manual analysis, then validate and prioritize — so you get fresh, real, actionable exposure, not recycled dumps, plus a clear plan to fix it.
Can you remove the leaked data or take down fake domains?
The report gives you prioritized remediation steps, including takedown guidance. Actual takedowns (credential resets, domain takedowns) are handled by you or your provider, but I'll tell you exactly what to do and in what order.
