Browse categories
Explore
Fiverr Pro
English
$
USD
I will do website penetration testing, vulnerability scanning, web pentest
Offensive Security Specialist, AI security Tester, Virtual Assistant
I’m Shakil Ahmed Srabon (Shahaz), I work in offensive security, testing AI systems for weaknesses, and I also handle virtual assistant work across tech and business operations. I've spent 5 years in t...
About this Gig
Most penetration testers run a scanner, export the PDF, and call it a day. That is a massive operational risk.
I operate as your Technical Security Partner. Combining 5 years in tech with 2 years in offensive security, I simulate real-world cyberattacks to ensure your web applications, APIs, and business networks are completely hardened against malicious actors.
What I Audit & Secure:
- OWASP Top 10 & SANS 25: SQLi, XSS, CSRF, and broken access controls.
- Server-Side Flaws: RCE, LFI, RFI, SSRF, XXE, and IDOR manipulation.
- Business Logic Vulnerabilities: Data validation bypass and endpoint abuse.
- API Integrity: Testing hidden microservices and data leak boundaries.
The Smarter Security Approach (What You Get):
- Advanced Manual Testing: Deep human evaluation using Burp Suite Pro alongside commercial scanners.
- Developer-Ready PDF: Comprehensive vulnerability reports containing clear proof-of-concept (PoC) steps.
- Business Protection: Maintain compliance, prevent data breaches, and preserve your customer trust.
Every package scale receives an advanced-level, exhaustive audit report. Message me right now to secure your infrastructure before someone else exploits it!
My Portfolio
FAQ
What is included in the Basic Package?
This tier covers an advanced, deep-dive manual penetration test for small-scale properties, early MVPs, or single landing pages. You get a comprehensive, detailed PDF audit report with proof-of-concept steps and patch guides.
What is included in the Standard Package?
This covers a full-stack, advanced penetration test for medium-scale platforms and standard business applications. I thoroughly audit your authentication layers, APIs, and business logic against the full OWASP Top 10 framework, delivering an exhaustive vulnerability report.
What is included in the Premium Package?
Designed for large-scale enterprise environments, complex multi-role dashboards, or major portals. You get an elite manual security assessment covering OWASP Top 10 + SANS 25 flaws, severe code execution testing, and 14 days of dedicated developer post-patch re-test support.
Why do you emphasize manual testing over automatic tools?
Automatic scanners only catch simple, surface-level bugs and miss critical business logic flaws. Combining 5 years in tech with Burp Suite Pro, I think like a real human adversary. I manually manipulate system logic, abuse API endpoints, and bypass auth controls that tools miss.
Will your penetration testing break my live, active website?
Testing on a staging copy is ideal, but I am highly trained in non-destructive exploitation. All manual attacks are safely controlled to isolate vulnerabilities without causing system crashes, performance drops, or active business downtime. Your operational uptime is 100% safe.
What happens if my system architecture takes longer to audit?
Securing your business is my primary objective; financial gain is secondary. If an intricate logical flaw or complex endpoint requires deeper investigation beyond our initial contract parameters, I will gladly compromise and invest the extra hours for free to ensure flawless execution.
Do you verify my developer's code fixes after the audit?
Absolutely. Security is a continuous loop. Once your development team implements the mitigation patches provided in my report, I offer dedicated re-test windows (included by default in the Premium tier) to safely verify that the vulnerabilities are completely closed and hardened.
Is my sensitive system data and source code secure with you?
Data protection is my highest priority. With 2 years in offensive security, I practice strict asset isolation and use a secure local testing environment. I am completely NDA-compliant, practice secure credential handling, and never leak or retain your proprietary infrastructure logs.
Do we use video calls to discuss complex network vulnerabilities?
Yes! Complex web application security requires absolute alignment. We can easily hop on a live video or screen-share consultation call right through Fiverr’s secure system to review your infrastructure layout, walk through critical exploit proofs, and plan the remediation strategy.
