Browse categories
Explore
Fiverr Pro
English
$
USD
I will do a website security audit as per owasp top 10 and fix bugs
Penetration Tester
I am a Penetration Tester specializing in vulnerability assessment and offensive security. Through hands-on internships in ethical hacking and offensive security, I perform network enumeration, vulner...
About this Gig
Is your website really secure? I audit it against the OWASP Top 10 and help you fix the problems before real attackers find them.
WHAT I CHECK:
SQL Injection and XSS
Broken authentication and session issues
Access control flaws (IDOR)
Security misconfiguration
Sensitive data exposure
Outdated components and vulnerable plugins
SSL/TLS and security header issues
WHAT YOU RECEIVE:
Summary report with severity levels
Annotated screenshots as proof
Clear, step-by-step fix recommendations
Detailed PDF report (Standard and Premium)
Vulnerability fixing and re-test (Premium)
Works with WordPress, PHP, Laravel, Node.js, Flask and custom websites.
Tools: Burp Suite, OWASP ZAP, Nmap, Nikto.
IMPORTANT: I only test websites you own or have written permission to test. Please message me before ordering so we can confirm the scope.
Testing application:
Website
Development technology:
C/C++
•
Go
•
JavaScript
•
Kotlin
•
PHP
Device:
PC
•
Linux
FAQ
Will the testing take my website down?
No. Testing is controlled and careful, and I avoid heavy-load or destructive tests. I still recommend a backup before we start, especially for the Premium package.
Do you need written permission to test my site?
Yes. I only test websites you own or have written permission to test. Please confirm this when you place the order. I cannot proceed without it.
Which package includes fixing the vulnerabilities?
Only the Premium package includes fixing and a re-test. Basic and Standard give you the findings and clear fix guidance so you or your developer can apply them.
What do I need to share for the Premium fixing?
I need access to your code or hosting, ideally on a staging copy. Please take a full backup first. I never keep your credentials after the order is complete.
Which technologies do you support?
WordPress, PHP, Laravel, Node.js, Python/Flask and custom websites. If you use something else, message me first and I will confirm whether I can help.
Will my findings stay confidential?
Yes. Your website details and findings are never shared with anyone. I am happy to sign an NDA on request.
