Hire the Best Penetration Testers
in Serbia

✅ Professional Penetration Tester ✅ 3500+ Hours ✅ Top Rated Plus Freelancer Security Researcher and Penetration Tester recognized by the U.S. Department of Defense, AT&T, Sony, and Semrush for the responsible disclosure of 40+ vulnerabilities via HackerOne. Since 2022, an active member of the Synack Red Team - an elite tier of offensive security specialists vetted through rigorous technical and background screening. Every engagement concludes with a comprehensive technical report built to satisfy the specific penetration testing controls required for HIPAA, ISO 27001, SOC2, and PCI-DSS. I provide a high-level executive summary for stakeholders alongside deep-dive technical findings, fully reproducible Proofs-of-Concept (PoCs), and prioritized remediation steps to ensure your team can effectively close every gap before your audit. Specializing in black and gray box testing of live web applications, cloud environments, and networks, covering all common attack vectors, business logic flaws, and discovering previously undisclosed vulnerabilities (0days) to prevent high-impact data breaches. Service Description: 1) Web Application Penetration Testing (OWASP Top 10, PTES, ASVS, Business Logic Testing) 2) Mobile Application Penetration Testing (OWASP Top 10, MASVS, MASTG, PTES) 3) Network Penetration Testing (Active Directory, Entra ID, Internal & External Network) 4) API Security Testing - REST, GraphQL, SOAP, gRPC, Webhooks (OWASP API Top 10) 5) Cloud Security Testing - AWS/Azure/GCP/OCI/Alibaba/IBM/DigitalOcean/SaaS/IaaS/PaaS 6) Cloud-Native & Container Security (Kubernetes, Docker, OpenShift, EKS/AKS/GKE) 7) LLM Security Testing (OWASP LLM Top 10, Prompt Injection, Data Poisoning) Tools used in engagements: BurpSuite Professional | Custom Python scripts | BloodHound | Impacket Framework | Responder | Metasploit | Mimikatz | Nuclei | Nmap | FRIDA | Android Studio | Pacu | Prowler | Postman Identify and secure your attack surface before threat actors do ! Message me to discuss your project requirements.

Hey there! Are you looking for experienced penetration tester? You are on the right place. I am OSCP certified and I specialize in manual penetration testing for web and SaaS applications. I help companies strengthen their security posture and meet compliance frameworks such as SOC 2, ISO 27001, HIPAA, and PCI-DSS. My testing approach is thorough, compliance-aligned, and entirely hands-on — no automated scanner reports. I follow industry standards such as OWASP, PTES and NIST. Every test simulates real-world attack scenarios to uncover vulnerabilities that scanners often miss, including logic flaws, privilege escalation paths, and chained exploits. 🔍 My penetration testing service includes: - Full-scope manual penetration test, lasting 1–2 weeks - Detailed report meeting SOC 2 / ISO 27001 / HIPAA / PCI-DSS standards - Real-time visibility through my secure client platform - track findings as they are discovered - Unlimited retests for free - any fixed issues are retested within 24 hours - Direct communication with me via Slack or MS Teams 🧠Why Me? - I focus exclusively on web applications and SaaS platforms - not generic infrastructure scans. - My reporting format is built around compliance readiness, with clear risk explanations, business impact summaries, and actionable remediation steps. - I provide hands-on pentesting, ensure findings are understood and fixed efficiently. If you are preparing for a SOC 2 audit or simply want to ensure your application is secure before launch, I can help you achieve both.

I help organizations build resilient security by thinking like an attacker and acting like a defender. With 9+ years of experience, I provide end-to-end solutions: I find your vulnerabilities before hackers do, help you respond to incidents, and ensure you meet compliance standards. What I Offer: Offensive Security: Penetration testing & red team simulations to expose critical risks. Defensive Security: Incident response, forensics, and SOC/SIEM design to strengthen your posture. Compliance & Architecture: Guidance on frameworks like DORA, ISO 27001, GDRP. PCI DSS and pre-production security reviews to build security in from the start. Why Work With Me? I led the red team and application security for a major financial group, securing everything from AI systems to cloud infrastructure. My findings are recognized by organizations like the U.S. Department of Defense and NASA. I don't just point out problems—I provide clear, actionable solutions to fix them for good. Let's secure your business. Send me a message to discuss your project.