Browse categories
Explore
Fiverr Pro
English
$
USD
I will test your API security for rest and graphql apis
SVP Head Application Security and VAPT, Penetration Testing Expert
I lead Application Security and VAPT as SVP at a major bank, with over 13 years in cybersecurity and bug bounty hunting and over 8 years of professional penetration testing for banks and enterprises. ...
About this Gig
APIs are where modern applications break. Broken access control and weak authentication quietly expose customer data, and most teams only find out after an incident. I test your API the way an attacker would, and I show you exactly what to fix.
I lead Application Security and VAPT as SVP at a major bank, with over 13 years in cybersecurity and bug bounty hunting, a HackerOne Top 100 ranking for three consecutive years and certifications including eCPPT, CRTP and eWPTXv2. API testing for banking systems is my daily work.
What you get: testing based on the OWASP API Security Top 10, covering broken object level authorisation, authentication flaws, excessive data exposure, rate limiting and business logic abuse.
Every finding includes proof, severity and remediation guidance your developers can use right away. Standard and Premium include a retest.
You must own the API or hold written authorisation to test it. Message me before ordering with your API type and documentation format, and I will confirm scope and package.
Testing application:
API
Development technology:
Other
Device:
PC
•
Linux
My Portfolio
FAQ
What do you need from me?
Your API documentation or collection file, a test environment and test accounts for each role.
Do you test GraphQL?
Yes. I test REST, GraphQL and SOAP services.
Will testing affect production?
I test carefully and agree the approach with you first. A staging environment is preferred where possible.
Is a retest included?
Yes, in Standard and Premium packages.
