You will get API Security Testing Using OWASP API Security Top 10
Top Rated
Top Rated
Project details
My API Security Testing Using OWASP API Security Top 10 service is tailored to identify and mitigate critical vulnerabilities in your APIs. By leveraging OWASP’s industry-recognized framework, I ensure your APIs are secure against common threats, protecting sensitive data and maintaining trust with your users. Whether you need a basic assessment or an advanced audit, I provide actionable insights and detailed guidance to enhance your API's security posture.
Cybersecurity Expertise
Audit, Risk Assessment, Gap AnalysisTechnology Type
SaaS, Web Application, Mobile DeviceCybersecurity Regulation
NIST Cybersecurity Framework, PCI DSS, SOC 2What's included
| Service Tiers |
Starter
$250
|
Standard
$350
|
Advanced
$500
|
|---|---|---|---|
| Delivery Time | 3 days | 5 days | 7 days |
Small Company Size | |||
Medium Company Size | |||
Large Company Size |
68 reviews
(67)
(1)
(0)
(0)
(0)
This project doesn't have any reviews.
MA
Matthew A.
Jan 5, 2025
Call
Hakimuddin was a god send to work with.
The best on Upwork I have spoken with too date.
Gave constructive and well articulated advice on our initial call.
The best on Upwork I have spoken with too date.
Gave constructive and well articulated advice on our initial call.
LC
Luis C.
Nov 7, 2023
Pen test
DT
Doviana T.
Jun 30, 2022
Glasswall File Demo Creation
Hakim did again a good job on helping our CTO with a project for our sales colleagues. He is highly recommended.
DT
Doviana T.
Feb 9, 2022
"Open Source Intelligence" analysis for files processed by Glasswall CDR engine
Hakim did a great job on the project he was assigned. Very pleased with his deliverables. A+ freelancer.
SS
Susana S.
Oct 25, 2021
Security Assessment for Web Application
Hakim is knowledgeable and professional and timely with his services.
About Hakimuddin
Cyber Security Expert | Ethical Hacker | Web & API Penetration Tester
100%
Job Success
Safat, Kuwait - 11:47 am local time
I support engineering and security teams in strengthening application security posture through deep technical assessments aligned with OWASP Top 10, secure architecture validation, and attacker mindset analysis for critical systems.
I design and develop focused security assessment tools and lightweight vulnerability scanners that target real-world attack surfaces often missed by generic enterprise security platforms.
Most commercial scanners generate noise or miss critical, context-specific risks in platforms like Oracle EBS, SAP, and CMS-based systems. My approach is different — I build targeted scanners that identify real, exploitable issues with minimal false positives.
## PROFESSIONAL CYBERSECURITY SERVICES
Web Application Penetration Testing (OWASP Top 10 Compliance)
API Security Testing
DAST & SAST Security Assessments
Mobile Application Penetration Testing (iOS & Android)
Embedded & Thick Client Application Security Testing
Cloud Security Assessments (AWS, Azure, GCP)
IoT Device Security Testing
Wireless Network Penetration Testing
SCADA & Industrial Control Systems (ICS) Security Testing
Security Breach & Incident Investigations
Social Engineering Assessments
Red Team & Blue Team Simulations
GDPR Security Testing (Article 32 Compliance)
Pre-Acquisition Security Assessments
Security Posture Benchmarking & Peer Comparison
External Digital Footprint & Exposure Analysis
Continuous Security Risk Monitoring of Public Assets
Supplier & Third-Party Security Risk Assessment
## CORE COMPETENCIES
Web & SaaS Security Testing: SQLi, XSS, CSRF, IDOR, Authentication & Business Logic Vulnerabilities
Penetration Testing & Ethical Hacking: External/Internal, Wireless, Social Engineering
Vulnerability Assessment & Network Auditing: Risk identification, validation, prioritization, remediation
Cloud Security: AWS, Azure, GCP security assessments, misconfigurations, exposed assets
Incident Response & Threat Hunting: Forensics, breach investigation, attack path analysis
Compliance & Auditing: ISO 27001, NIST, PCI-DSS, GDPR, HIPAA, SOC 2
Application Security Testing: Mobile apps (iOS/Android), Chrome extensions, Salesforce apps, REST APIs
## OSINT & THREAT INTELLIGENCE
OSINT & Intelligence Gathering: Analysis of publicly available data for actionable security insights
Threat Hunting: Detection of IOCs, APT activity, and malicious behavior patterns
Incident Response Support: Breach analysis, containment guidance, and attack reconstruction
Digital Investigations: Threat actor profiling and digital footprint analysis
Dark Web Monitoring: Tracking leaked credentials, stolen data, and breach exposure
## VALUE-ADDED SERVICES
Security Reporting & Debriefing: Executive-ready reports with findings, impact analysis, and remediation guidance
Security Improvement Recommendations: Research-driven, actionable insights to strengthen security posture
Security Knowledge Transfer: Practical guidance and best practices for engineering and security teams
Custom Security Tool Development: Design and development of tailored security automation and assessment tools
Incident Response Support (24/7): Rapid response assistance for critical security incidents and breaches
##CERTIFICATIONS##
Certified Information Security Manager (CISM)
Certified Information Systems Security Professional (CISSP)
Certified Ethical Hacker (CEH)
ISO 27001 Lead Auditor
CompTIA Security+
## TECHNOLOGY EXPERTISE
Web & SaaS Security: Enterprise web apps, CMS, and API-based systems (REST/GraphQL)
Application Security: Laravel, Django, and modern backend architectures
Cloud Security: AWS, Azure, GCP, IAM, cloud-native environments
Network Security: Enterprise networks, firewalls, VPNs, segmentation (Cisco, Palo Alto, Fortinet)
E-Commerce & Enterprise Platforms: Shopify, Magento, and payment-integrated systems
Infrastructure & Hosting: cPanel, Plesk, WHMCS
## TOOLS & TECHNIQUES
Manual Security Testing: Web apps & APIs, authentication/MFA flaws, business logic vulnerabilities, XSS, SQLi, IDOR
Security Tools: Burp Suite, Kali Linux, Metasploit, Nessus, Qualys, Wireshark
Scripting & Automation: Python, Bash, PowerShell for security testing and tooling
Threat Intelligence: OSINT, MISP, Recorded Future, attack indicator analysis
Reverse Engineering & Malware Analysis: IDA Pro, Ghidra, Cuckoo Sandbox
Cloud Security Tools: AWS Inspector, Azure Security Center, GCP security scanners
Steps for completing your project
After purchasing the project, send requirements so Hakimuddin can start the project.
Delivery time starts when Hakimuddin receives requirements from you.
Hakimuddin works on your project following the steps below.
Revisions may occur after the delivery date.
Initial Consultation & Information Gathering
I will review your API documentation, endpoints, and security requirements to understand the testing scope.
OWASP API Top 10 Risk Analysis
I will assess your API for risks such as broken object-level authorization, injection flaws, and misconfigurations, in line with OWASP API Top 10 guidelines.