GM Salman A M.

🚨 If your application, SaaS platform, or cloud environment has never undergone a professional security assessment, you may have unknown vulnerabilities that attackers can exploit. I’m a Certified Penetration Tester and Ethical Hacker providing Vulnerability Assessment and Penetration testing (VAPT) services for web applications, APIs, cloud infrastructure, mobile apps, SaaS platforms, and network environments. My goal is not just to find vulnerabilities — but to help you understand real security risks and fix them effectively. I perform manual penetration testing supported by professional security tools to identify exploitable weaknesses such as authentication flaws, privilege escalation paths, injection vulnerabilities, and business logic issues. You will receive a clear and actionable security report that helps developers resolve issues and allows management to understand the real business impact. 🎯 My Services - Vulnerability Assessment & Penetration Testing (VAPT) - Web Application Penetration Testing (OWASP Top 10) - API Penetration Testing (REST, GraphQL, authentication flaws, IDOR, injection) - Cloud Infrastructure Security (AWS, Azure — misconfigurations, IAM, exposed services) - Network Penetration Testing (internal & external) - Mobile Application Security (Android & iOS) - SaaS Platform Security & Penetration Testing (multi-tenant logic, RBAC, privilege escalation) - CMS Security (WordPress, Laravel, custom apps) - Retesting after remediation 📋 What You Will Receive A clear, structured security report designed for both technical teams and business stakeholders, including: • Executive summary for management and decision-makers • Detailed vulnerability findings with severity ratings • CVSS scoring and risk prioritization • Proof-of-concept evidence (screenshots, request/response captures) • Business impact explanation for each issue • Step-by-step remediation guidance for developers • Retesting validation after fixes are applied • Reporting that can support ISO 27001 and SOC 2 compliance preparation 🏆 Certifications - Certified Ethical Hacker Practical — EC-Council - eLearnSecurity Junior Penetration Tester (eJPT) — INE - Certified API Penetration Tester — APISec University - IBM Cybersecurity Analyst - Cisco Verified Ethical Hacker - ISO 27001:2022 Lead Auditor 🛠️ Tools I work with Burp Suite Pro, OWASP ZAP, Nmap, Nessus, Metasploit, MobSF, Wireshark, Postman, and custom Python/Bash scripts and so on. Whether you're preparing for a security review, compliance audit, or investor due diligence, I can help you understand your attack surface and security risks. 📩 Send me your scope or asset list and I’ll help you determine the best testing approach.