NAHID M.

I help businesses identify and validate security vulnerabilities in web applications and APIs, with a strong focus on authentication, authorization, and access control. As a Senior Penetration Tester, I specialize in manual security testing, vulnerability validation, and practical security assessments using tools such as Burp Suite. My core areas include: * Web Application Penetration Testing * API Security Testing * Authentication & Session Security * Authorization, IDOR & BOLA Testing * OWASP Top 10 * Business Logic Testing * OAuth Security Testing * Vulnerability Validation & Reporting I provide clear technical reports with reproduction steps, evidence, impact assessment, severity, and remediation guidance. My goal is to help clients understand real security risks and provide actionable information to remediate them effectively.