Browse categories
Explore
Fiverr Pro
English
$
USD
I will perform API security testing and vulnerability assessment
Reverse Engineer
Certified Android Reverse Engineer | Penetration Tester | Mobile App Security Specialist
Are you concerned your Android application or backend API may be vulnerable to reverse engineering, repackagin...
About this Gig
Is your API exposing sensitive data or allowing unauthorized access?
I will perform an authorized security assessment of your REST, GraphQL or mobile-backend API and provide a clear vulnerability report with practical remediation guidance.
Depending on the selected package, testing may include:
Authentication and session-security review
Authorization and access-control testing
Input-validation assessment
Sensitive-data exposure checks
Rate-limit and configuration review
API endpoint and business-logic analysis
OWASP API Security Top 10 coverage
Manual verification of confirmed findings
Your report can include:
Executive summary
Confirmed findings with severity ratings
Evidence and affected endpoints
Business-impact explanation
Clear remediation recommendations
Tools may include Burp Suite, Postman and custom analysis scripts, supported by careful manual testing.
I only test APIs that you own or are explicitly authorized to assess. Please contact me before ordering so I can confirm the scope and recommend the correct package.
My Portfolio
FAQ
What API types can you assess?
I can assess authorized REST, GraphQL and mobile-backend APIs. Please message me with your technology and scope before ordering.
Do you require API documentation?
Documentation, a Postman collection or an OpenAPI file is strongly recommended. Testing may still be possible without it, but the scope must be discussed first.
Will you test a production API?
Production testing may require a restricted methodology and an agreed testing window. A staging environment is usually safer and preferable.
Do you provide a vulnerability report?
Yes. Reports include confirmed findings, severity, affected endpoints, evidence, impact and remediation recommendations.
Do you provide remediation support?
Guidance is included. Implementation support and extended consultation can be arranged through a custom offer.
Can you guarantee that my API is secure?
No assessment can guarantee complete security. The report reflects the agreed scope, available access and testing period.
Will you retest resolved vulnerabilities?
Yes. Premium includes one limited retest. Retesting can also be purchased as an extra.
Can you test an API I do not own?
Only when you can demonstrate explicit authorization from the owner.
