Najam U.

Passed a scan but still not sure you’re secure? I do hands-on penetration testing for web apps, APIs, cloud, and networks, with findings your team can reproduce and act on right away. Expert-Vetted on Upwork (Top 1% of security professionals). Founder of Exfiltra, an EU-registered cybersecurity firm that has secured environments for organizations generating $6B+ in annual revenue. No scanner dump, no jargon wall. Every finding comes with a severity rating (CVSS), a working proof of concept, and a concrete fix your developers can ship. I retest after you patch to confirm the holes are actually closed. What I test: ✔ Web application penetration testing (OWASP Top 10, PTES, NIST) ✔ API security testing (REST, GraphQL, auth/OAuth, IDOR, broken access control) ✔ Cloud penetration testing and security architecture review (AWS, Azure, GCP) ✔ Network and external perimeter penetration testing ✔ Mobile application penetration testing ✔ Source code / secure code review Cloud security (Azure focus): Azure security architecture reviews Microsoft Defender for Cloud & Sentinel Identity security (Entra ID / Conditional Access) Cloud configuration reviews and CIS Benchmark hardening DevSecOps & security automation: Secure CI/CD pipelines (Azure DevOps / GitHub Actions) Infrastructure as Code security (Terraform / Bicep) SAST and DAST pipeline integration Security tools: Burp Suite, OWASP ZAP, Snyk, Semgrep, Wazuh, CrowdStrike, Microsoft Sentinel Compliance & advisory: I also help teams prepare for SOC 2, ISO 27001, HIPAA, FedRAMP, and CMMC, and act as fractional/virtual CISO for companies that need ongoing security leadership without a full-time hire. AI & LLM security: threat modeling for AI-powered applications, prompt injection testing, and secure architecture review for LLM integrations. How I work: authorized testing only, on systems you own or have permission to test. Everything is documented through Upwork for a written record of every finding — no verbal hand-waving. Why clients work with me: Upwork Expert-Vetted (Top 1% of freelancers) Founder of Exfiltra, supported by a team of specialists for larger engagements Contributor to OWASP ZAP Background in both software engineering and cybersecurity Security research experience involving organizations like the U.S. Department of Defense Not a good fit if: You want to hack or recover social media accounts You want enterprise-grade security but aren't ready to invest in it If your goal is to build secure systems instead of reacting to breaches later, feel free to invite me to your job or send a message describing your project.