Sfoglia categorie
Esplora
Fiverr Pro
Italiano
$
USD
I will perform a web application penetration test with owasp and poc report
Software, AI, Automation, Security
Hi, I'm Karan, founder of Errsol Technologies LLP. Since 2019 my team has helped businesses across 6+ countries build secure, scalable software that actually holds up in production. We do custom web &...
Informazioni su questo servizio
Most "pentest" gigs run a free scanner and email you the PDF. That's a Nessus export with a logo on it not a pentest.
We work manually, scanner-assisted not the other way around.
Methodology:
- Recon and attack surface mapping
- Authenticated + unauthenticated testing
- Manual OWASP Top 10 (2021) and ASVS Level 2
- DAST sweep Burp Pro, Nuclei, ZAP
- Business logic testing what scanners miss
- Auth, authorization, session deep-dive
- Every finding reproduced with PoC video or curl
Deliverables:
- Executive summary (board-ready, one page)
- Technical report with CVSS 3.1
- Reproduction steps
- Remediation guidance with code examples
- Re-test of fixes (Premium, within 30 days)
Out of scope by default: social engineering, physical, DoS, third-party APIs you don't own. Add-ons available.
Why us:
Errsol Technologies LLP building and securing web applications since 2019. Our team brings backgrounds across enterprise SaaS, Big 4 cybersecurity consulting, and academic security research. Clients across six countries; one tool acquired by the client.
Message us with scope before ordering.
Dispositivo:
Desktop
•
Laptop
•
Server
Sistema operativo:
Windows
•
Altro
Il mio portfolio
FAQ
Will you sign an NDA?
Yes — before any access is provided. Mutual NDA standard.
Do I need a staging environment?
Strongly recommended. Production testing requires written authorization in your scope of work document.
Will the report pass SOC 2 / ISO 27001 audits?
es — formatted for auditor consumption. Add the audit-ready formatting extra if you have a specific framework.
What if you find a critical?
We notify you within 24 hours of identification — not at end-of-engagement.
What technologies do you support?
Any web stack — React/Vue/Angular frontends, Node/Python/Java/Go/PHP/Ruby backends, REST and GraphQL APIs.
Do you provide a remediation guide?
Yes — every finding includes specific remediation steps with code-level examples where possible.
What is your disclosure policy?
We disclose only to you. Findings are not shared, published, or retained after engagement closure unless you authorize it.
