I will manually pentest web vulnerability for security research


About this gig
Note: I'm from Red Team only!! Don't ask for fixing vulnerable code,please ask your developer or Blue Team. And i work and manage order only on fiverr platform to avoid scam.
Worried about your websites security? I provide manual web penetration testing to identify vulnerabilities that automated tools often miss. With hands-on skills from HackTheBox & TryHackMe, I test your website like a real attacker carefully and safely.
1 URL / 2 pages means:
- 1 URL = one base target domain or host you want tested (for example https://example.com or https://app.example.com). Different subdomains (app.example.com, api.example.com) count as separate URLs.
- 2 pages = up to two distinct pages/endpoints on that URL or API that I will manually test (for example: /, /login, /dashboard, /profile, /settings).
What I Test:
- OWASP Top 10 (SQLi, XSS, CSRF, SSRF, IDOR, etc.)
- Authentication & authorization flaws
- Business logic issues
- API security checks (if applicable)
What You Get:
- Professional report with proof of findings
- Risk level & impact explained
- Step-by-step reproduction details
- Practical fix recommendations
Your website deserves real protection. Let me help secure it before hackers exploit it.
Respect third-party rights
Please be aware that it is against Fiverr's policies for sellers to include themes, templates, or any other elements that infringe third-party rights or applicable laws in the delivered work. Read more about in our Guide to Responsible Digital Creation.
Get to know Shuvo Dutta
Web Security expert with 3years of experience
- FromBangladesh
- Member sinceNov 2024
- Last delivery8 months
Languages
Bengali, English
My Portfolio
FAQ
Will testing affect my site availability?
I avoid destructive techniques. Manual testing is low-impact, but some checks (e.g., logic testing) might change application state. I’ll perform safe tests by default and coordinate timing if you need strict uptime guarantees.
How do you handle sensitive data you find?
I follow strict confidentiality. I’ll not exfiltrate or store real user data unnecessarily. All sensitive findings are handled securely and removed from reports on request after remediation.
Which tools do you use?
I rely mostly on manual techniques and selective tooling (browser devtools, Burp Suite, proxy tools, custom scripts) to validate findings. I avoid noisy mass-scanners unless requested.
How do you price the engagement?
Pricing depends on scope (# of pages/endpoints, auth flows, API complexity). See my packages for typical scopes.
What information do I get before you start?
Pre-engagement checklist: scope, rules of engagement, authorized IPs, preferred testing window, and access credentials.
2 reviews for this Gig
| (2) | ||
| (0) | ||
| (0) | ||
| (0) | ||
| (0) |
Rating Breakdown
- Seller communication level
- Quality of delivery
- Value of delivery
Sort By
R 
r0mande

Germany
Everything's perfect, thanks!
$50-$100
Price
4 days
Duration
S 
Seller's Response
Helpful?D dm1981386

Germany
great! will work with him for sure again!
Up to $50
Price
4 days
Duration
S 
Seller's Response
Helpful?
2 reviews for this Gig
| (2) | ||
| (0) | ||
| (0) | ||
| (0) | ||
| (0) |
Rating Breakdown
- Seller communication level
- Quality of delivery
- Value of delivery
Sort By
R 
r0mande

Germany
Everything's perfect, thanks!
$50-$100
Price
4 days
Duration
S 
Seller's Response
Helpful?D dm1981386

Germany
great! will work with him for sure again!
Up to $50
Price
4 days
Duration
S 
Seller's Response
Helpful?

