You will get Security Audit of your AWS Account & Get Report
Top Rated
Project details
Are you looking for a gig that can give you security report for your AWS account?
I've got you covered!
This is your one stop shop for everything related to AWS security
In this gig, I will perform security audit on your Amazon Web Services (AWS) account and then give you a security report that will list all the security issues/vulnerabilities in your environment.
My report will point out issues with:
RDS
S3 Buckets
EC2
IAM Policies
Encryption Policies
AWS Configuration
Security Groups
Cloudtrail
Security Hub
API Gateways
AWS KMS
ACLs
AWS Lightsail
and the list goes on...
I can also help you configure and resolve the security issues in your AWS account to make it secure and scalable.
I will be using CIS AWS Foundations Benchmark as the standard to test against the security checks in your environment.
I can help you setup Security Hub, Firewall, WAF and access policies in your AWS environment.
Without further ado, just ping me to get your AWS account secured.
Place the order now to get a professional report for your AWS account that you can share with your customers and use it internally as well!
I've got you covered!
This is your one stop shop for everything related to AWS security
In this gig, I will perform security audit on your Amazon Web Services (AWS) account and then give you a security report that will list all the security issues/vulnerabilities in your environment.
My report will point out issues with:
RDS
S3 Buckets
EC2
IAM Policies
Encryption Policies
AWS Configuration
Security Groups
Cloudtrail
Security Hub
API Gateways
AWS KMS
ACLs
AWS Lightsail
and the list goes on...
I can also help you configure and resolve the security issues in your AWS account to make it secure and scalable.
I will be using CIS AWS Foundations Benchmark as the standard to test against the security checks in your environment.
I can help you setup Security Hub, Firewall, WAF and access policies in your AWS environment.
Without further ado, just ping me to get your AWS account secured.
Place the order now to get a professional report for your AWS account that you can share with your customers and use it internally as well!
Cybersecurity Expertise
Audit, Risk Assessment, Gap AnalysisWhat's included $300
These options are included with the project scope.
$300
- Delivery Time 3 days
- Security Analysis
Optional add-ons
You can add these on the next page.
Fast 1 Day Delivery
+$150
56 reviews
(55)
(0)
(0)
(1)
(0)
This project doesn't have any reviews.
AI
Adele I.
Jul 28, 2026
Senior Security Engineer/API Integration Specialist
Najam was a great asset to our MDR team when we quickly needed someone who is both highly skilled and reliable to jump in and help us during a difficult period. He is very knowledgeable and was willing to make recommendations for how to improve on our existing architecture. We would gladly work with him again in the future!
HG
Happi G.
Jul 27, 2026
WordPress Security Audit Needed Before Launch
Najam delivered a thorough and well-structured WordPress security audit within the agreed timeline. The report clearly categorized the findings by severity, included practical remediation steps, and provided useful technical evidence for each issue. Communication was professional and responsive throughout the project. I would be happy to work with him again for future security reviews or pre-launch testing.
EK
Elie K.
Jun 12, 2026
Grey Box Penetration Tester Needed for Web Application
We have worked with Exfiltra on two separate penetration testing engagements and were very satisfied with their professionalism, technical expertise, and quality of reporting. Their team was responsive, thorough, and provided clear findings with practical recommendations. We are pleased to recommend Exfiltra for cybersecurity and penetration testing services.
TW
Taben W.
May 12, 2026
30 minute consultation
Najam
DB
Dana B.
Apr 16, 2026
Ongoing Expert InfoSec Engineer
We hired this infosec engineer to strengthen our security posture, and the results exceeded expectations. Najam quickly identified critical vulnerabilities, clearly explained the risks, and implemented practical, effective solutions without overengineering.
Communication was sharp and professional throughout. No hand-holding required, just solid expertise and execution. Highly recommended.
Communication was sharp and professional throughout. No hand-holding required, just solid expertise and execution. Highly recommended.
About Najam
Penetration Tester | Cloud, Web, API & Network Security | vCISO
100%
Job Success
Gujranwala, Pakistan - 12:28 pm local time
Expert-Vetted on Upwork (Top 1% of security professionals). Founder of Exfiltra, a cybersecurity firm that has secured environments for organizations generating $6B+ in annual revenue.
No scanner dump, no jargon wall. Every finding comes with a severity rating (CVSS), a working proof of concept, and a concrete fix your developers can ship. I retest after you patch to confirm the holes are actually closed.
What I test:
✔ Web application penetration testing (OWASP Top 10, PTES, NIST)
✔ API security testing (REST, GraphQL, auth/OAuth, IDOR, broken access control)
✔ Cloud penetration testing and security architecture review (AWS, Azure, GCP)
✔ Network and external perimeter penetration testing
✔ Mobile application penetration testing
✔ Source code / secure code review
Cloud security (Azure focus):
Azure security architecture reviews
Microsoft Defender for Cloud & Sentinel
Identity security (Entra ID / Conditional Access)
Cloud configuration reviews and CIS Benchmark hardening
DevSecOps & security automation:
Secure CI/CD pipelines (Azure DevOps / GitHub Actions)
Infrastructure as Code security (Terraform / Bicep)
SAST and DAST pipeline integration
Security tools: Burp Suite, OWASP ZAP, Snyk, Semgrep, Wazuh, CrowdStrike, Microsoft Sentinel
Compliance & advisory: I also help teams prepare for SOC 2, ISO 27001, HIPAA, FedRAMP, and CMMC, and act as fractional/virtual CISO for companies that need ongoing security leadership without a full-time hire.
AI & LLM security: threat modeling for AI-powered applications, prompt injection testing, and secure architecture review for LLM integrations.
How I work: authorized testing only, on systems you own or have permission to test. Everything is documented through Upwork for a written record of every finding — no verbal hand-waving.
Why clients work with me:
Upwork Expert-Vetted (Top 1% of freelancers)
Founder of Exfiltra, supported by a team of specialists for larger engagements
Contributor to OWASP ZAP
Background in both software engineering and cybersecurity
Security research experience involving organizations like the U.S. Department of Defense
Not a good fit if:
You want to hack or recover social media accounts
You want enterprise-grade security but aren't ready to invest in it
If your goal is to build secure systems instead of reacting to breaches later, feel free to invite me to your job or send a message describing your project.
Steps for completing your project
After purchasing the project, send requirements so Najam can start the project.
Delivery time starts when Najam receives requirements from you.
Najam works on your project following the steps below.
Revisions may occur after the delivery date.
Grant access to AWS account
Security Audit on AWS account