Web Application Penetration Testing
OWASP Top 10, authentication bypass, business logic flaws, and API security testing for production web apps.
- OWASP Top 10
- Auth & access control
- Business logic
- APIs
Services
Penetration testing, scoped in writing before it starts
Web application, network, and Active Directory testing for companies that need a real security assessment — not just a scanner report. Every engagement gets a fixed price and timeline before any work begins.
First time hiring a freelance tester? Read what to look for →
Network Penetration Testing
Internal and external network testing: perimeter exposure, service misconfigurations, and segmentation validation.
- External & internal
- Segmentation
- Nmap
- Metasploit
- NetExec
Active Directory Penetration Testing
Full attack-path mapping across your Windows domain: ADCS, Kerberoasting, ACL abuse, and lateral movement.
- ADCS ESC1–8
- Kerberoasting
- BloodHound
- Privilege escalation
Cloud Penetration Testing (Azure)
Entra ID, Azure RBAC privilege escalation, storage exposure, and Defender for Cloud gaps. AZ-500 certified.
- Entra ID
- Azure RBAC
- AZ-500
- Defender for Cloud
SOC 2 Penetration Testing
The annual pentest your SOC 2 Type II audit requires, delivered as an auditor-ready report your assessor accepts.
- SOC 2 Type II
- Trust Services Criteria
- Auditor-ready report
PCI DSS Penetration Testing
Segmentation and application-layer testing that satisfies PCI DSS Requirement 11.4 for cardholder-data environments.
- Requirement 11.4
- CDE segmentation
- ASV-adjacent
Ready to talk about your project?
Free 30-minute scoping call. You'll get a written proposal with a fixed price and timeline within 24 hours.