You will get Penetration Testing Report for SOC2 Compliance
Top Rated
Project details
Upon completion of the penetration test, you will receive a comprehensive Penetration Testing report in compliance with SOC 2 standards. Once the retesting is completed and vulnerabilities have been fixed, you will get attestation indicating all outstanding vulnerabilities have been fixed.
Cybersecurity Expertise
Audit, Risk Assessment, Gap AnalysisTechnology Type
Firewall, SaaS, Web ApplicationCybersecurity Regulation
ISO, PCI DSS, SOC 2What's included
| Service Tiers |
Starter
$1,500
|
Standard
$2,000
|
Advanced
$2,500
|
|---|---|---|---|
| Delivery Time | 3 days | 5 days | 7 days |
Compliance Plan | |||
Gap Analysis | - | - | - |
Implementation | - | - | - |
49 reviews
(48)
(0)
(0)
(1)
(0)
This project doesn't have any reviews.
LG
Lucas G.
Mar 15, 2026
Web Application and Network Penetration Tester Needed
PB
Prakash B.
Mar 12, 2026
VAPT for Infrastructure (OS) + Web Application — Delivery in 48 Hours
Here is a ~1000-character Upwork review for Rafay and his team, focused on VA/PT across AWS, on-prem VMs, endpoints, and application security:
We had the opportunity to work with Rafay and his team on a comprehensive Vulnerability Assessment and Penetration Testing (VA/PT) engagement covering our full infrastructure, including AWS cloud resources, on-premise virtual machines, endpoints, and our application layer. The team demonstrated a high level of professionalism, technical expertise, and a very structured methodology throughout the entire process.
Their assessment was thorough and well-organized, identifying potential vulnerabilities across multiple layers of the infrastructure while clearly explaining the associated risks and impact. The final report was detailed, easy to understand, and included practical remediation recommendations that our team could immediately act upon.
Communication was smooth and responsive, and they were always available to clarify findings and guide us through best practices for improving our security posture. Their work provided us with valuable insights and significantly strengthened our infrastructure security.
I highly recommend Rafay and his team to any organization looking for reliable and highly skilled cybersecurity professionals for VA/PT engagements.
We had the opportunity to work with Rafay and his team on a comprehensive Vulnerability Assessment and Penetration Testing (VA/PT) engagement covering our full infrastructure, including AWS cloud resources, on-premise virtual machines, endpoints, and our application layer. The team demonstrated a high level of professionalism, technical expertise, and a very structured methodology throughout the entire process.
Their assessment was thorough and well-organized, identifying potential vulnerabilities across multiple layers of the infrastructure while clearly explaining the associated risks and impact. The final report was detailed, easy to understand, and included practical remediation recommendations that our team could immediately act upon.
Communication was smooth and responsive, and they were always available to clarify findings and guide us through best practices for improving our security posture. Their work provided us with valuable insights and significantly strengthened our infrastructure security.
I highly recommend Rafay and his team to any organization looking for reliable and highly skilled cybersecurity professionals for VA/PT engagements.
OB
Operations B.
Feb 13, 2026
DDOS Mitigation & Security Expert Needed
JT
Justin T.
Feb 7, 2026
Cybersecurity Expert Needed for OWASP Top 10 Source Code Review
Rafay was easy to work with, completed on time, didn't go over his estimated hours, and produced what I wanted. Would work with him again.
MS
Michael S.
Nov 27, 2025
PCI DSS Compliance Questionnaire Specialist (Urgent)
About Rafay
Cyber Security Consultant | Penetration Tester| PCI-QSA |CREST| V-CISO
100%
Job Success
London, United Kingdom - 7:13 am local time
I currently hold the following educational degrees and certifications:
✅ Masters in Cyber-Security and Forensics
✅ Certified Information Systems Security Professional (CISSP)
✅ Certified Information Security Auditor (CISA)
✅ Offensive Security Certified Professional (OSCP)
✅ CREST Practitioner Security Analyst (CPSA)
✅ Offensive Security Web Expert (OSWE)
✅Offensive Security Wireless Professional (OSWP)
Security/Compliance Frameworks:
ISO 27001, SOC2, PCI-DSS, HIPAA, NY DFS 23/ NYCRR Part 500, NIST, CIS, GDPR, HIPAA, FedRAMP, NIST 800-53, NIST 800-171, NIS2, DORA
Services I Offer:
Penetration Testing
Vulnerability Assessment
PCI-DSS SAQ Filing + ASV
PCI compliance assessment
Cloud Security (AWS, Azure and GCP)
Red Teaming Assessment
Threat Modelling
Security Architecture Review
Web 3.0 Wallet Security
Smart Contract Audits
Cloudflare WAF Protection
DDOS Protection Expert
Bot Protection Expert
Steps for completing your project
After purchasing the project, send requirements so Rafay can start the project.
Delivery time starts when Rafay receives requirements from you.
Rafay works on your project following the steps below.
Revisions may occur after the delivery date.
Client receives final report
Once the vulnerability assessment and penetration testing engagement is complete, the client will receive the final report.