Freelance Cybersecurity / Penetration Tester

Budget: 1200 USD Deadline: 8 days

For an AI-integrated web app, the assessment needs two parallel tracks. The first is standard web/API testing covering auth bypass, IDOR, SSRF and injection chains. The second is AI-layer testing against OWASP Top 10 for LLM Applications 2025. On the AI side, the vectors that matter most are prompt injection (direct and indirect via stored user content), system prompt leakage, excessive agency if the model calls tools/APIs, and vector/embedding weaknesses if you use RAG. I test with Burp Suite Pro for the web layer, manual adversarial prompting plus custom scripts for the AI layer. Deliverable: severity-rated report with reproducible PoC per finding and remediation steps prioritized by risk. What's the tech stack? Specifically interested whether the AI component has tool-calling or external data retrieval, since that determines how wide the AI attack surface actually is.

Budget: 25 USD Deadline: 1 day

Hello. I am ready to take on your order. I have extensive experience and certifications.

Budget: 15000 USD Deadline: 10 days

Good day! We have experience in conducting comprehensive penetration testing for AI solutions. We implement this through in-depth analysis of architecture vulnerabilities and testing attack vectors on models. We will conduct a security audit of your web application, identify critical risks, and provide a detailed report with recommendations for remediation. We are ready to start working in the near future.

Budget: 1500 USD Deadline: 7 days

Hello!

I am a Software Developer with experience in cybersecurity, web application security testing, infrastructure analysis, and API security assessments. I have worked with web applications built using Python, JavaScript, React, Django, FastAPI, Laravel, Docker, Kubernetes, and cloud-based environments.

For this project, I can perform:

• Black-box and white-box penetration testing
• OWASP Top 10 assessment
• Authentication and authorization testing
• REST API security testing
• IDOR, XSS, SQL Injection, CSRF, SSRF, file upload, and business logic testing
• Security review of AI-related features and attack surfaces
• Detailed security report including severity ratings, proof-of-concept findings, and remediation recommendations

My background includes experience with Linux environments, Docker, Kubernetes, networking, infrastructure automation, log analysis, and security-focused projects such as honeypots and monitoring systems.

Hourly Rate: $25–35/hour (depending on scope)

Estimated Fixed Price: $500–1,500+ (depending on application size, number of APIs, authentication flows, and testing depth)

Experience: 3+ years in software development with practical cybersecurity and infrastructure experience

Similar Work:
• Security analysis of web applications and APIs
• Infrastructure and server security reviews
• Authentication and authorization testing
• Vulnerability assessments for custom web platforms
• Security-focused monitoring and honeypot projects

English Level: B2 (Upper-Intermediate)

I would be happy to review the application scope and provide a more accurate estimate after discussing the architecture, available environments, and testing requirements.

Looking forward to hearing from you. Expand

Budget: 1500 USD Deadline: 7 days

Hello Slava,
I’m interested in performing a comprehensive security assessment of your AI-powered web application.
I can cover black-box and white-box penetration testing, OWASP Top 10, REST API security, authentication, authorization, IDOR, XSS, SQL injection, CSRF, SSRF, file-upload vulnerabilities, and AI-specific risks such as prompt injection and sensitive-data exposure.
You will receive a professional report with severity ratings, reproducible proof-of-concept steps, and practical remediation recommendations. I can also perform a retest after the identified vulnerabilities are fixed.
My details:
Hourly rate: $35/hour
Estimated fixed price: $1500,
Experience: 2 years
English proficiency: Intermediate (B1–B2). Strong written English and good listening comprehension; spoken communication is currently less fluent.
Relevant experience: Hands-on experience assessing web applications and REST APIs for OWASP Top 10 vulnerabilities, including authentication flaws, IDOR, XSS, SQL injection, CSRF, SSRF, and insecure file uploads. I have also prepared structured security reports with proof-of-concept steps and remediation guidance.
Before starting, I would like to confirm the testing scope, architecture, available source code and API documentation, test accounts, AI components, and authorized testing environment.
I would be happy to discuss the project and provide a more precise estimate after reviewing its scope. Expand

Budget: 2500 USD Deadline: 10 days

we already have a nearly ready security assessment framework for ai web apps, so we can adapt it quickly and start here on freelancehunt now ))

hourly rate - 45 usd
preliminary fixed price - 2500 usd
estimated timeline - 10 business days after access
experience - 10+ years in web systems, rest api integrations, ai automation, security-aware architecture and remediation work
english - fluent written, comfortable spoken

WE can test black-box and white-box areas, rest api, authentication flows, role permissions, file uploads, owasp top 10 and ai-specific prompt or data exposure risks.

the report will include severity, proof of concept, impact, remediation steps and retest notes.

for an accurat fixed price, please clarify two things.

- how many user roles, api endpoints and environments are in scope?
- do you need source code review, infrastructure review, or only the web app and rest api?

relevant examples close to this type of ai and platform security surface

- ai and automation platform surfaces - https://business.ingello.com/vorfahr
- ai system architecture and agent processes - https://business.ingello.com/fractal
- business platform with roles, logic and integrations - https://business.ingello.com/platforma

main profile - https://systems-fl.ingello.com Expand

Budget: 2000 USD Deadline: 5 days

I have strong experience in web application penetration testing, including both black-box and white-box approaches, with a focus on OWASP Top 10, API security, authentication/authorization flaws, and modern web attack vectors. I can assess issues such as XSS, SQL Injection, CSRF, SSRF, IDOR, file upload vulnerabilities, broken access control, and authentication bypass, as well as review AI-related attack surfaces and integration points

55$/h / fixed 2000$