Website Penetration Test
Budget / Salary£750–1,500
TypeFreelance project
LocationRemote
Posted1 hour ago
I need a seasoned ethical hacker to run a full-scope penetration test against my live website. The priority is to uncover weaknesses that could expose our database or allow logic flaws in the web application to be exploited. All findings must be mapped to PCI DSS requirements so I can demonstrate compliance to my acquiring bank.
Here is what I expect:
• A controlled black-box test using industry-standard toolsets such as Burp Suite, OWASP ZAP, sqlmap, nmap, plus any custom scripts you rely on.
• No disruption to production; schedule your active exploits during an agreed maintenance window and keep traffic levels reasonable.
• A written report that ranks every issue by risk and includes reproduction steps, screenshots or PoC code, and clear remediation guidance.
• An executive summary in plain language for non-technical stakeholders.
• One round of verification testing after fixes are applied.
I will provide the target URL, test credentials, and an NDA once we agree on timing. Let me know your estimated turnaround and any additional information you require to get started.
Here is what I expect:
• A controlled black-box test using industry-standard toolsets such as Burp Suite, OWASP ZAP, sqlmap, nmap, plus any custom scripts you rely on.
• No disruption to production; schedule your active exploits during an agreed maintenance window and keep traffic levels reasonable.
• A written report that ranks every issue by risk and includes reproduction steps, screenshots or PoC code, and clear remediation guidance.
• An executive summary in plain language for non-technical stakeholders.
• One round of verification testing after fixes are applied.
I will provide the target URL, test credentials, and an NDA once we agree on timing. Let me know your estimated turnaround and any additional information you require to get started.
Apply on Freelancer →
Project sourced from Freelancer.com. Applications happen directly on the original platform — we never collect your data.