Browse categories
Explore
Fiverr Pro
English
$
USD
I will pentest your website and deliver a full vulnerability report
Ubaid Ur Rehman
About this gig
Your website has vulnerabilities right now. The only question is who finds them first you or an attacker.
I'm a security researcher with Hall of Fame recognition from EC Council and confirmed critical findings on live platforms including Z.ai. I test manually using OWASP Top 10 methodology. No scanner dumps. Real findings, real proof, real fixes.
What you receive:
- Professional PDF pentest report
- Every finding rated Critical / High / Medium / Low
- Screenshot proof for every vulnerability
- Exact fix recommendation per issue
- Plain English executive summary
What I test:
- SQL Injection & database exposure
- Cross-Site Scripting (XSS)
- IDOR & broken access control
- Authentication weaknesses
- Security misconfigurations
I only deliver findings I can fully prove. If I can't screenshot it, it doesn't go in the report.
Not sure if your site qualifies? Message me first I'll tell you within an hour whether I can help.
Respect third-party rights
Please be aware that it is against Fiverr's policies for sellers to include themes, templates, or any other elements that infringe third-party rights or applicable laws in the delivered work. Read more about in our Guide to Responsible Digital Creation.
Get to know Ubaid Ur Rehman
Ubaid Ur Rehman
Security Researcher and Web App Pentester
- FromPakistan
- Member sinceSep 2022
- Avg. response time1 hour
Languages
Urdu, English
I've built real software that people actually use — Noor Connect (an Islamic companion on F‑Droid), Pak Books (a digital library for Pakistani students), and shadowaudit (an open‑source API security tool). My security research earned me a spot in the EC‑Council Hall of Fame after finding bugs in Z.ai, PriceOye, and Waqar Electronics. If you need a working product, not just a prototype, message me. I'll treat your project like my own.
My Portfolio
FAQ
Q: What do you need from me to start?
A: Just your website URL and written confirmation that you own it or are authorized to test it. I don't need logins, source code, or anything else to get started. The clearer you define the scope, the more thorough the report.
Q: Will this testing break or slow down my website?
A: No. I use safe, non-destructive manual testing methods. Your site stays fully live throughout the entire audit. I do not run aggressive automated scanners that could cause downtime.
Q: What if you find no vulnerabilities?
A: You still receive a full PDF report confirming your site was tested against the OWASP Top 10 with zero findings. That's documented proof your site passed — useful for clients, investors, or anyone who asks about your security posture.
