Comprehensive Website & Cloud Security Audit
Budget / Salary₹150,000–250,000
TypeFreelance project
LocationRemote
Posted1 hour ago
I want a seasoned ethical-hacker to give me a clear, unbiased view of my current security posture. You will have explicit permission to probe two areas: our public-facing company website / online store and the cloud accounts that run our business. Within the cloud sphere I’m particularly concerned about email and shared-file repositories, website hosting and databases, plus the customer account and payment environments.
The brief is two-fold. First, uncover any evidence that someone may already have slipped in—malicious code, unexpected admin users, log irregularities, data exfiltration trails, etc. Second, map every weakness that could let an attacker in tomorrow, from misconfigurations and stale credentials to unpatched software and insecure API endpoints.
To keep the engagement tight and actionable, I expect:
• A concise report describing all confirmed or potential compromises, the technical details behind each finding, and proof-of-concept where safe.
• A prioritized vulnerability list with recommended remediation steps and short-term mitigations.
• A debrief call or recorded walkthrough so my non-technical stakeholders understand the risks and next moves.
Industry-standard tooling and techniques are fine—Burp Suite, Nessus, Metasploit, OWASP ZAP, manual code review—so long as the methodology remains transparent and replicable. All testing must be non-disruptive; uptime for production services cannot dip.
If you can deliver a thorough yet easy-to-digest assessment that leaves me confident my data stays safe, let’s get started.
The brief is two-fold. First, uncover any evidence that someone may already have slipped in—malicious code, unexpected admin users, log irregularities, data exfiltration trails, etc. Second, map every weakness that could let an attacker in tomorrow, from misconfigurations and stale credentials to unpatched software and insecure API endpoints.
To keep the engagement tight and actionable, I expect:
• A concise report describing all confirmed or potential compromises, the technical details behind each finding, and proof-of-concept where safe.
• A prioritized vulnerability list with recommended remediation steps and short-term mitigations.
• A debrief call or recorded walkthrough so my non-technical stakeholders understand the risks and next moves.
Industry-standard tooling and techniques are fine—Burp Suite, Nessus, Metasploit, OWASP ZAP, manual code review—so long as the methodology remains transparent and replicable. All testing must be non-disruptive; uptime for production services cannot dip.
If you can deliver a thorough yet easy-to-digest assessment that leaves me confident my data stays safe, let’s get started.
Apply on Freelancer →
Project sourced from Freelancer.com. Applications happen directly on the original platform — we never collect your data.