Browse categories
Explore
Fiverr Pro
English
$
USD
I will manually audit your web app for security vulnerabilities
Cyber Security Researcher and Python Developer
I'm a cyber security researcher specializing in manual web app security audits — I test your app like a real attacker: auth flows, access controls, input handling.
Track record: merged security PR (E...
About this Gig
Scanners miss logic flaws. I don't run a scanner and send you the PDF I read your code and test your app like an attacker would.
What I check (OWASP-based, manual): authentication and session handling, access control and IDOR, XSS, SQL injection, file upload abuse, exposed secrets, security headers.
What you get: written findings report with severity ratings, exact file and line, proof-of-concept steps, and a specific fix per issue. No vague recommendations.
What I need: app URL (staging preferred) plus a test account, or source code access. Written permission to test.
I don't do: automated-only scans, DoS testing, social engineering, or production testing without explicit scope.
About me: Cyber Security student, merged security PR (Element Synapse), published GHSA advisory, HackerOne hunter, built NetVulnX.
FAQs (click + Add FAQ, add these three):
Q: How is this different from an automated scan?
A: Scanners check known CVE signatures. I test your app's logic the password reset that doesn't expire links, the API that leaks another user's data. That's where real breaches come from.
Q: Do you test my live production site?
A: Only with your written permission, and I prefer a staging e
