
Open
Posted
•
Ends in 5 days
Paid on delivery
I’m looking for a seasoned cyber-security professional to run an end-to-end threat assessment focused on application security. The scope spans every product we ship—web portals, iOS/Android apps, and a small suite of desktop utilities—so I need someone comfortable moving seamlessly between the three environments. Here’s what I expect to come back with: • A clear, reproducible methodology covering both static and dynamic testing (Burp Suite, OWASP ZAP, SAST/DAST or similar). • A concise vulnerability report that ranks issues by risk, shows proof-of-concept exploitation steps, and maps findings to OWASP Top 10 where relevant. • Practical, prioritized remediation guidance our developers can pick up immediately. I’ll grant test credentials, source-code snippets, and staging URLs on kickoff. The engagement wraps when I can validate fixes against the original findings and sign off that critical and high-risk items are closed or fully mitigated. If your experience lines up with multi-platform application assessments and you’re ready to dive in this week, let’s get started.
Project ID: 40187245
17 proposals
Open for bidding
Remote project
Active 22 hours ago
Set your budget and timeframe
Get paid for your work
Outline your proposal
It's free to sign up and bid on jobs
17 freelancers are bidding on average $148 USD for this job

Comprehensive Application Threat Assessment I’m a professional writer with extensive experience crafting engaging, precise, and high-quality content across academic, professional, and creative fields. I specialize in delivering work that not only meets requirements but also resonates with the target audience. Every project I take on is handled with care, attention to detail, and originality. I ensure timely delivery while maintaining clarity, structure, and style tailored to your needs. I’d love the opportunity to bring your ideas to life and exceed your expectations. Best regards, GameOfWords!
$30 USD in 1 day
4.9
4.9

Hello there, I can run a **full end-to-end application security assessment** across your web portals, mobile apps (iOS/Android), and desktop utilities, with clear findings your developers can act on immediately. Approach: * Defined, reproducible methodology combining **SAST + DAST** * Dynamic testing with **Burp Suite / OWASP ZAP** * Static review of provided code snippets and configs * Auth, session, API, and data-handling review across platforms * Findings mapped to **OWASP Top 10** where applicable Deliverables: * Concise vulnerability report with **risk ranking** * Clear **proof-of-concept steps** to reproduce each issue * Practical, prioritized **remediation guidance** * Validation support to confirm fixes close the original findings Workflow & timeline: * Kickoff + access review: same day * Testing phase: 3–5 days (scope dependent) * Report delivery: 1–2 days after testing * Re-test & sign-off once fixes are applied I’ve conducted **multi-platform application security assessments** covering web, mobile, and desktop environments, and I focus on clarity, accuracy, and developer-friendly guidance—not noisy reports. Ready to start this week and move quickly through assessment and validation.
$140 USD in 7 days
4.2
4.2

As a Full Stack Web and Mobile App Developer with over a decade of experience, an extensive background in building secure and scalable applications perfectly aligns with your comprehensive application threat assessment project. I've completed 2000+ projects to date and the challenges you presented excite me. My broad skill set encompasses proficiency in both web portals (PHP, Laravel, Angular) as well as iOS/Android apps (Flutter, React Native), giving me a strong understanding of multi-platform vulnerabilities which is crucial for this project. Furthermore, my expertise extends to other essential aspects for this engagement such as API integrations, security measures like SAST/DAST or similar assessments, and creating intuitive interfaces in line with OWASP Top 10's best practices. Additionally, my commeasurable skills in test case creation and defect tracking make me adept at providing practical, prioritized remediation guidance that will arm your developers with actionable steps to implement fixe immediately. Moreover, I bring not just technical prowess but also a deep sense of commitment and timely communication to all my projects. You can expect a clear, reproducible methodology supported by detailed reports tailored to address your unique needs when we work together. Let's collaborate and ensure airtight security for all your products.
$100 USD in 7 days
3.8
3.8

I can provide a thorough, professional threat assessment spanning your web portals, mobile apps, and desktop utilities with a clean methodology using static and dynamic testing tools tailored for seamless multi-platform analysis. My expertise encompasses vulnerability identification, risk prioritization, and clear, integrated remediation strategies that developers can implement immediately. What development frameworks and languages are in use across the three environments? Would you like me to walk you through how I’d structure this? Regards, Alicia.
$150 USD in 14 days
3.2
3.2

With over a dozen years in the industry, I offer the necessary depth of experience needed to expertly navigate the complexities inherent in your multi-platform application ecosystem. My appreciation and understanding of all three major web environments, including iOS and Android, match your project needs. In terms of your assessment expectations, I am proficient in using tools such as OWASP ZAP, SAST/DAST, Burp Suite, to mention but a few. With these tools at my disposal, your required vulnerability report that prioritizes risks and provides proof-of-concept exploitation steps will be delivered efficiently. In addition to threat assessment aptitude, my practical-oriented approach shines when preparing comprehensive remediation recommendations for developers. Rather than overwhelming them with jargon-heavy guidance notes, I prioritize deliverables that can be easily implemented by your development team. By the end of my tenure with you, we will not only have identified points for improvement but have conducted successful mitigative measures.
$100 USD in 7 days
3.0
3.0

Hi, I'm a Cyber Security Researcher with practical experience gained through playing CTFs (Capture The Flag), engaging in Bug Bounties, and working as a Pentester. Notice: Don’t ask me to hack something u don’t OWN What I can do for you: Web/API/Android (OWASP TOP 10) Pentesting: You can also get this service from here: https://www.freelancer.com/service/web_security/web-app-penetration-test-owasp-top Lets Chat…
$140 USD in 7 days
3.2
3.2

Hello, I hope you are doing well. I’m a cyber-security professional specializing in end-to-end application security testing across web portals, mobile apps, and desktop utilities. I blend hands-on testing with risk-based analysis to identify, reproduce, and prioritize vulnerabilities, with clear OWASP mapping. I’ve led multi-platform assessments for complex product suites using Burp Suite, OWASP ZAP, SAST/DAST, delivering concise reports with risk ranking, PoCs, and developer-ready remediation guidance. I can execute the work end-to-end, delivering the reproducible methodology, PoCs, prioritized fixes, and a validation plan. I guarantee clear, actionable results your team can implement quickly. Please feel free to contact me so we can discuss more details. I am looking forward to the chance of working together. Best regards, Billy Bryan
$250 USD in 2 days
2.0
2.0

We at Offensium Vault Private Limited (ISO 27001:2022 & ISO 9001:2015) can deliver a full end-to-end application security threat assessment across web portals, iOS/Android apps, and desktop utilities. Our testing combines manual, attacker-driven techniques with static and dynamic analysis, ensuring both depth and real-world exploitability. We align strictly with OWASP best practices and focus on findings your developers can act on immediately. Approach & Tooling Manual security testing + automation Burp Suite, OWASP ZAP for DAST SAST tools (stack-appropriate) for code-level review Coverage mapped to OWASP Top 10 and platform-specific risks Deliverables Clear, reproducible testing methodology Concise vulnerability report with severity ranking, PoCs, and OWASP mapping Prioritized remediation guidance (quick wins + long-term fixes) Validation support to confirm critical/high issues are closed. With staging access, test credentials, and limited code context, we’re ready to start immediately and work through to clean sign-off.
$140 USD in 7 days
1.4
1.4

Hi, I’ve reviewed your requirements and this engagement aligns perfectly with my background in application security across web, mobile (iOS/Android), and desktop platforms. I follow a clear, reproducible methodology combining threat modeling with static and dynamic testing using tools like Burp Suite, OWASP ZAP, and SAST/DAST, along with focused manual testing for high-impact vulnerabilities. What you’ll receive: A concise, risk-prioritized vulnerability report Proof-of-concept exploitation steps OWASP Top 10 mapping where applicable Practical, developer-ready remediation guidance Retesting to validate fixes before final sign-off I’m comfortable reviewing source code snippets, testing staging environments, and working closely with your team to ensure all critical and high-risk issues are fully mitigated. Quick questions: Approximate number of applications/APIs in scope? Preferred report format (PDF, Excel, Jira-ready)? Any compliance alignment required (ISO, SOC2, etc.)? I can start this week and deliver actionable, high-quality results. Best regards, Mohd Haris Application Security Specialist
$199 USD in 7 days
0.2
0.2

Dear Client, Good evening . I hope this proposal finds you well. This is to inform you that I have KEENLY gone through your project description, CLEARLY understood all the project requirements as instructed in your project proposal and this is to let you know that I will perfectly deliver as desired. Being in possession of all stated required skills, (AI Mobile App Development, Usability Testing, Android, Testing / QA and Penetration Testing), as this is my field of professional specialization having completed all certifications and developed adequate experience in the respective field, I hereby humbly request you to consider my bid for professional, quality and affordable services that meet all your requirements. I always guarantee timely delivery and unlimited revisions where necessary hence you are assured of utmost satisfaction when working with me. Please send me a message so that we can discuss more and seal the project. WELCOME.
$250 USD in 1 day
0.0
0.0

Hi, I can do this. With extensive experience in application security assessments across web, iOS, Android, and desktop platforms, I am well-equipped to conduct a comprehensive threat assessment for your products. My approach includes a clear, reproducible methodology utilizing tools like Burp Suite and OWASP ZAP for both static and dynamic testing. I will deliver a concise vulnerability report that ranks issues by risk, provides proof-of-concept exploitation steps, and maps findings to the OWASP Top 10. Additionally, I will offer practical, prioritized remediation guidance tailored for your development team. I am ready to start this week and will ensure that all critical and high-risk items are validated and closed upon completion. I look forward to collaborating with you to enhance your application security. Best regards, Ashnasajid
$140 USD in 3 days
0.0
0.0

Hi there, You’re absolutely in the RIGHT PLACE. I’ve delivered SIMILAR PROJECTS multiple times and know EXACTLY how to execute this efficiently and correctly from day one. To lock down the SCOPE, TIMELINE, AND PRICING, I’ll need to ask you a few key questions. Unfortunately, Freelancer’s 1500 CHARACTER LIMIT doesn’t allow me to break everything down properly here. Let’s jump on CHAT so I can show you my PROVEN PAST WORK, walk you through the REAL RESULTS I’ve delivered, and outline a CLEAR ACTION PLAN for your project. You’ll immediately see why my approach is DIFFERENT and EFFECTIVE. If you’re serious about getting this done RIGHT, I’m ready to move forward. Looking forward to CONNECTING and WINNING TOGETHER. Cheers, Mayank B
$140 USD in 7 days
0.0
0.0

Hi There, I have 5+ years of experience in penetration testing including Web Application penetration testing; System Application penetration testing; Mobile application penetration testing; Network application penetration testing; social engineering penetration testing etc. Follow systematic approach and best industry methodology like OWASP Testing Guide v4(OTGv4) ; SANS top 25; NIST SP 800-115; PCI DSS etc to perform penetration testing.I can assure you that I will be an ideal candidate for what you are looking for. Please out to me for further discussions. Thank you
$140 USD in 7 days
0.0
0.0

Security doesn’t fail in one place. It fails across boundaries. I’m a seasoned cybersecurity professional with over 8 years of hands-on experience, specializing in full-spectrum application threat assessments across web, mobile, and desktop environments. I don’t treat platforms as silos. I test how trust moves between them and where assumptions quietly break. How I approach this : - I use a disciplined, reproducible methodology combining static and dynamic analysis. Tools like Burp Suite, OWASP ZAP, and SAST or DAST support the work, but every finding is manually validated. If it can’t be exploited, it isn’t risk. I focus on real attacker behavior. Chained flaws. Broken logic. Weak trust boundaries. The things automated tools miss. What you get : - You receive a concise vulnerability report ranked by real-world risk, with proof of exploitation and clear mapping to OWASP Top 10 where relevant. Remediation guidance is practical, prioritized, and written so developers can act immediately. I’m comfortable working with test credentials, source snippets, and staging environments, and I stay engaged until fixes are validated and critical and high-risk items are closed or fully mitigated. No noise. No checkbox security. Just clear answers about whether your products can actually be compromised. If you’re ready to start this week, I’m ready. RedPointer - Adversary Emulation | Red Teaming | Penetration Testing.
$140 USD in 7 days
0.0
0.0

محافظة الإسكندرية, Egypt
Member since Sep 24, 2025
₹37500-75000 INR
₹600-1500 INR
₹1500-12500 INR
$250-750 USD
£20-250 GBP
₹1500-12500 INR
₹1500-12500 INR
₹750-1250 INR / hour
$8-15 CAD / hour
$29-30 USD / hour
$1800-2500 USD
$30-250 USD
$5000-10000 USD
$30-250 CAD
$250-750 AUD
$250-750 USD
$250-750 USD
$30-250 USD
₹600-1500 INR
$8-15 USD / hour