Asim S.

Bank-grade penetration testing, without the agency price. I lead Application Security & VAPT at a major bank and have tested 1,000+ web, API and mobile applications. I find the critical flaws automated scanners miss — and prove each one with a clear, fix-ready report. 🏆 HackerOne Top 100 (3 consecutive years) • Synack Red Team member • CVE-2021-31521 • Recognised by Google, Microsoft, Facebook, Salesforce & Dropbox • $5,000 critical bounty (Salesforce) ✅ Certifications: eCPPT • eWPTXv2 • CRTP • CEH • CWASP What you get: • Manual + tool-assisted testing (Burp Suite, Metasploit, MobSF, Frida) — OWASP Top 10, API Top 10 & MASVS methodology • CVSS-scored report with evidence, business impact and step-by-step remediation • Developer walkthrough call + retest to confirm fixes Specialities: Web & API penetration testing • Mobile app pentest (Android & iOS) • AWS cloud & network VAPT • Source code review • Red teaming • Active Directory security How I work: signed scope/authorisation before any testing, NDA welcome, all communication and payment stay on Upwork. 📩 Message me your app type and timeline — I offer a free 15-minute scoping call and a fixed-price quote within 24 hours.