Discover how Vollna can revolutionize your search for Internet Security projects on platforms like Upwork. With advanced filters, real-time alerts, and detailed analytics, streamline your freelancing journey and land jobs that perfectly match your skills.
Signup for free
to get access to all filter attributes and instant notifications when new jobs are posted.
Setup filter
Get access to over 30+ filter attributes, setup instant notifications, integrate with your CRM and marketing tools, and more.
Hi there! There’s a fake profile made with my profile picture with husband. The profile is spreading my personal stolen cctv footage and also spreading words of lies and misinformation also blackmail me to write more!
WordPress Security Specialist Needed – Investigate Compromised Business Website
Applied
$40 - $80
/ hr
1 day ago
3
We have an existing WordPress business website that appears to have been compromised.
We are planning to replace the website separately, so this job is **not a redesign, rebuild or migration project**. There is no website content that needs to be extracted for the new site.
The purpose of this job is to determine what happened, how extensive the compromise is, and whether the issue is limited to WordPress or could affect the wider hosting environment.
We need an experienced WordPress security specialist to:
- Inspect the WordPress installation for malware, malicious code, backdoors, web shells and unauthorised modifications.
- Check WordPress core files, plugins and themes.
- Inspect the database for suspicious or injected content.
- Review administrator and user accounts for unauthorised access.
- Check relevant files such as `.htaccess`, `wp-config.php`, cron jobs and PHP files.
- Review available access/server logs where useful.
- Identify likely persistence or reinfection mechanisms.
- Determine the likely cause or entry point of the compromise where possible.
- Assess whether the compromise appears limited to the WordPress site or could extend to the wider hosting account.
- Check for risks affecting other hosting services, DNS, email accounts or related websites where relevant.
- Advise which passwords, credentials, API keys or services should be changed.
- Recommend the safest way to decommission the old WordPress installation.
- Provide a short written summary of findings and recommended actions.
Please do **not** perform additional remediation, migration or rebuilding work without approval first.
We are looking for someone with strong hands-on experience investigating compromised WordPress sites. Please explain whether your process includes manual investigation in addition to automated malware/security scanners.
Good communication is important, and we would like the findings explained clearly enough for a non-security specialist to understand.
Hourly rate:
40 - 80 USD
1 day ago
IT & Networking, Information Security & Compliance
My Instagram account has been hacked. I need help to recover it.
Details:
- I cannot access the email or phone number linked to the account.
- The hacker changed my email or phone number.
- I still know my username but have no old proof of ownership.
Ideal Skills & Experience:
- Experience with Instagram account recovery
- Knowledge of security protocols
- Ability to navigate support channels effectively
Please provide a clear plan and timeline for recovery.
Skills: PHP, Web Security, Computer Security, Technical Support, Internet Security, Social Media Management, Account Management, Security
Fixed budget:
20 - 250 GBP
1 day ago
Websites, IT & Software, Design, Media & Architecture, Data Entry & Admin, Engineering & Science, Business, Accounting, Human Resources & Legal, Web Security, Computer Security, Internet Security, Social Media Management, Technical Support, Security, Account Management
I need a trained web-security professional to examine my public-facing website and highlight any common weaknesses before they can be exploited. The scope is strictly the areas that are publicly accessible—no authenticated sections, portals, or payment flows—so the engagement should be quick, targeted, and non-intrusive.
Your assessment should combine automated scanning (e.g., OWASP ZAP, Burp Suite Community or similar) with manual verification so that false positives are weeded out and any missed issues are uncovered. Please respect production-safe practices at all times: no destructive attacks, no denial-of-service techniques, and no data tampering.
Deliverables
• A concise report that lists each vulnerability, its risk rating, reproducible PoC steps (screenshots or video welcome), and clear remediation advice.
• A summary spreadsheet or table that maps findings to the OWASP Top 10 categories for quick reference.
• A brief follow-up call or chat to walk me through the results and answer questions.
I will provide the live URL and any technical constraints once we start. Ideally, you can finish testing and deliver the report within one week.
Skills: PHP, Web Security, Website Testing, Internet Security, Penetration Testing, Risk Assessment, Data Protection, Security Auditing
Fixed budget:
25,000 - 50,000 INR
1 day ago
Websites, IT & Software, Design, Media & Architecture, Business, Accounting, Human Resources & Legal, Web Security, Website Testing, Internet Security, Penetration Testing, Risk Assessment, Data Protection, Security Auditing
Yahoo Email Recovery and Cybersecurity intruder detect-Fix Today
Applied
$20 - $50
/ hr
1 day ago
5
Tech- Yahoo Emai Format Recovery and Fix Cybersecurity intruder detect-Fix Today . Need to recover original email format and address Google Resets, auto fill Pass word issuses and constant windows 11 reoccuring storrage issues every 30 days. Recover preferred Email format first today or ASAP
Hourly rate:
20 - 50 USD
1 day ago
IT & Networking, Information Security & Compliance
I need an expert to manage our enterprise software. The software is currently hosted on a dedicated or virtual private server.
Key Responsibilities:
- Servers and Hosting Management
- Databases and Backups Management
- Security Updates and System Monitoring
Ideal Skills and Experience:
- Experience with dedicated and virtual private servers and cloud computing
- Strong background in database management
- Proficient in security protocols and system monitoring
Looking for someone to ensure our systems are fast, stable, and secure.
Skills: PHP, Web Security, Computer Security, Cloud Computing, Internet Security, Server, Security, Database Management, System Administration, Security Auditing
Hourly rate:
1250 - 2500 INR
1 day ago
Websites, IT & Software, Design, Media & Architecture, Engineering & Science, Business, Accounting, Human Resources & Legal, Web Security, Computer Security, Cloud Computing, Internet Security, Server, Security, Database Management, System Administration, Security Auditing
Needed: Virus Specialist to check wordpress website for malware and viruses and remove them
Applied
$50
2 days ago
5
My website is performing inadequately. Malware is suspected. I need a malware tech to check the website for viruses and malware and remove any, if found.
Fixed budget:
50 USD
2 days ago
IT & Networking, Information Security & Compliance
We need an expert to configure Cloudflare to strengthen our website security. The work includes reviewing current settings, identifying vulnerabilities, and implementing improvements to protect against threats. You will also document the changes made and provide recommendations for ongoing security best practices. This is a short-term project for someone who can work independently and deliver clear, actionable results.
Fixed budget:
40 USD
2 days ago
IT & Networking, Information Security & Compliance
We are seeking a cyber security expert to support our compliance efforts, with a strong preference for experience managing Sprinto for SOC2 and GDPR requirements. The role involves reviewing security controls, identifying gaps, and helping maintain ongoing compliance with relevant standards. You should be comfortable working with technical teams, documenting processes, and providing clear recommendations to strengthen our security posture. Experience with similar compliance frameworks is highly valued.
Hourly rate:
15 - 35 USD
3 days ago
IT & Networking, Information Security & Compliance
We need an expert to configure Cloudflare to strengthen our website security. The work includes reviewing current settings, identifying vulnerabilities, and implementing improvements to protect against threats. You will also document the changes made and provide recommendations for ongoing security best practices. This is a short-term project for someone who can work independently and deliver clear, actionable results.
Fixed budget:
30 USD
3 days ago
IT & Networking, Information Security & Compliance
Discord Security Expert for Server Protection
Applied
$100
3 days ago
3
Looking for a Discord Security Expert to help secure my server and prevent scammers and impersonators from targeting members. We’re seeing fake accounts pretending to be MySportPick and sending private messages to members, likely through our Welcome Channel. I want to protect the community while still using the Welcome Channel for promotions, sales updates, and marketing. I need someone who can review the current setup, recommend the best security approach, and walk me through implementation on a call. Please share your experience with Discord security and your pricing.
Fixed budget:
100 USD
3 days ago
IT & Networking, Information Security & Compliance
I’m looking for an experienced, ethical game hacker to dive into my own title and help me uncover – and then patch – any security weaknesses that could be abused during multiplayer matches. The very first area I want you to probe is the way player actions are validated and synchronised across the network. If there’s a loophole that lets a user move, shoot or otherwise act outside the rules, I need to know — and I need a solid fix.
You’ll have full access to a private test environment, plus source-level insight where required. I welcome any tools you normally rely on for exploit discovery: packet sniffers, debuggers, memory editors, man-in-the-middle scripts or custom fuzzers. Just document each step so I can reproduce your findings and understand the mitigation you propose.
Deliverables
• A concise vulnerability report for every issue discovered, including proof-of-concept steps or scripts
• Recommended code or configuration changes that close each gap without introducing new gameplay bugs
• A brief verification pass after fixes are applied to confirm the weaknesses are fully resolved
I built this game from scratch and I’m protective of player experience, so clear communication and ethical practice are non-negotiable. If you can spot what I’ve missed and help me harden the multiplayer layer quickly, we’ll be a great fit.
Skills: Web Security, Computer Security, Cryptography, Game Development, Internet Security, Penetration Testing, Network Security, Game Testing
Fixed budget:
37,500 - 75,000 INR
3 days ago
Websites, IT & Software, Engineering & Science, Business, Accounting, Human Resources & Legal, Web Security, Computer Security, Game Development, Internet Security, Penetration Testing, Cryptography, Network Security, Game Testing
Cybersecurity Specialist Needed for Internal and External VAPT — Own Tools Required
Applied
$2,000
3 days ago
5
Internal and external Vulnerability Assessment and Penetration Testing (VAPT) engagement for a client in Zambia
The assessment should identify security weaknesses, validate findings, and provide practical, prioritized remediation recommendations.
Provisional Scope
The environment covers two offices connected through a site-to-site VPN, with backup MPLS connectivity. Assets currently identified include:
Two physical servers.
Approximately four virtual servers supporting Active Directory, FreePBX/VoIP, help desk, and Sage Pastel.
Approximately seven network devices, including firewalls and switches.
At least one wireless access point.
Approximately three to four internal subnets.
Approximately three public IP addresses.
One public domain and associated authorized internet-facing services.
User endpoints, with quantities to be confirmed.
The final inventory and authorized targets will be agreed before testing. A third-party-hosted core insurance application is excluded.
Required Work
Review and finalize the assessment scope and testing plan.
Conduct internal and external vulnerability assessments.
Perform authenticated scanning where approved and technically appropriate.
Manually validate findings and identify false positives.
Propose controlled penetration testing to demonstrate the impact of exploitable weaknesses, subject to agreed rules of engagement.
Provide clear remediation guidance and support a findings review meeting.
Conduct one retest of remediated findings within an agreed period.
Testing will be coordinated to minimize operational disruption. Exploitation and any potentially disruptive activity require prior written authorization.
Deliverables
Assessment methodology, prerequisites, and rules of engagement.
Executive summary suitable for management.
Detailed technical report covering affected assets, severity ratings, supporting evidence, business impact, and remediation recommendations.
Prioritized remediation action plan.
Findings presentation and retest report.
Relevant findings should be mapped to ISO 27001 controls where appropriate. This engagement is a technical security assessment, rather than a full ISO 27001 compliance audit.
Fixed budget:
2,000 USD
3 days ago
IT & Networking, Information Security & Compliance
My WordPress website was hacked, and my hosting company shut it down. I need a developer to remove malicious content, clean up the site, and restore it to a safe state. The work should also include improving overall security, updating the site, and adding SEO improvements to help the site recover and perform better. Please share relevant experience handling hacked WordPress sites and restoring them securely.
Client's questions:
Describe your recent experience with similar projects
Fixed budget:
500 USD
3 days ago
IT & Networking, Information Security & Compliance
I need an expert to review my Webflow website and improve its performance and SEO. The site is currently defaulting to the non-www version despite recent changes, and I want to ensure the correct URL structure is enforced. I’m also looking for recommendations to improve page speed, fix any technical issues, and make sure the site is optimized for search engines. Please share your experience with similar projects and how you would approach diagnosing and resolving these issues. I also need a simple page added
We have built an invite-only client portal on Lovable (React front end) with our own Supabase project: Postgres, row-level security, Supabase Auth with emailed sign-in codes, security definer functions and a small email worker. We are about to invite our first users and want an independent security review first. This is a review, not a development project. Please do not propose building features.
What we want reviewed
- Row-level security, grants and security definer functions: can one client see or change another client's data, can a client write anything directly, can staff access be escalated?
- Authentication and sessions: the emailed sign-in code, invitations, deactivation, and any password routes.
- The server routes and scheduled worker: secret handling, rate limiting, Vault, pg_cron and pg_net.
- Black-box testing of the live site using demo accounts we provide.
What you will deliver
- A written report ranked by severity, with evidence, steps to reproduce and a recommended fix for each finding.
- A short call to walk us through it.
What we will provide, after an NDA and an agreed scope
- Read-only access to the code repository and database migrations.
- A security notes document listing our rules and our accepted risks.
- Demo staff and client accounts. No real client data and no service keys.
Rules
- Demo accounts only. No testing against real client accounts or data.
- No denial-of-service, load or social-engineering tests, and tell us before running any automated scanner.
- Report anything serious straight away.
Ideal fit
Experience auditing Supabase projects (row-level security and Postgres functions in particular), web application security (OWASP), and ideally AI-generated or Lovable code.
To apply, please include: how you would test row-level security, your estimated days, and a fixed-price quote.
Hourly rate:
20 - 50 USD
4 days ago
IT & Networking, Information Security & Compliance
micro1 is hiring experienced **Cyber Security Engineers** to help train next-generation AI systems through real-world cybersecurity and software engineering challenges.
**No previous AI experience required!**
### Responsibilities
- Conduct penetration testing and security audits.
- Identify and fix software vulnerabilities.
- Debug, refactor, and optimize codebases.
- Develop secure solutions using Python, Java, Rust, Go, C++, or TypeScript.
- Evaluate AI-generated code and provide technical feedback.
### Requirements
- Experience in cybersecurity, penetration testing, or application security.
- Strong programming and debugging skills.
- Knowledge of vulnerability assessments and secure coding.
- Ability to work independently and remotely.
### Benefits
- 100% remote — work from anywhere.
- Flexible working hours.
- Opportunity to contribute to AI development.
- Competitive, task-based compensation.
*The advertised $30–$100/hr range is indicative. Actual compensation is based on accepted tasks.*
We are a growing commercial insurance and payroll services organization specializing in the construction industry. Our team operates in a hybrid and remote environment, handling confidential client information, insurance carrier systems, CRM platforms, and payroll data.
We are seeking an experienced **Cybersecurity & IT Security Consultant** to assess, strengthen, and manage our cybersecurity infrastructure.
### Key Responsibilities
- Conduct a comprehensive cybersecurity risk assessment across both companies.
- Audit user accounts, access permissions, password management, and authentication systems.
- Review and secure LastPass, Google Workspace, NowCerts, Pipedrive, ADP, RingCentral, and insurance carrier portals.
- Implement multi-factor authentication (MFA), role-based access controls, and secure credential management.
- Develop and implement employee onboarding and immediate offboarding procedures, including access revocation and credential rotation.
- Assess remote employee devices, VPN configurations, home network security, and endpoint protection.
- Develop a formal Remote Work & Information Security Policy.
- Implement appropriate data backup, recovery, monitoring, and incident response procedures.
- Assist with cybersecurity requirements for commercial Cyber Liability insurance applications.
- Provide employee cybersecurity awareness training.
- Recommend and implement ongoing cybersecurity monitoring and maintenance.
### Qualifications
- 5+ years of professional experience in cybersecurity, IT security, or managed security services.
- Experience securing small to mid-sized businesses with remote employees.
- Strong knowledge of Google Workspace administration, identity and access management, MFA, password managers, endpoint security, and VPN technologies.
- Experience handling sensitive financial, insurance, payroll, or client information.
- Familiarity with NIST Cybersecurity Framework and relevant data privacy and security requirements.
- Relevant certifications such as CISSP, CISM, Security+, or equivalent demonstrated experience preferred.
- Ability to implement solutions, document procedures, and provide ongoing support—not simply deliver recommendations.
### Project Deliverables
1. Initial cybersecurity risk assessment and prioritized remediation plan.
2. Implementation of critical security controls.
3. Documented employee access management and offboarding procedures.
4. Remote Work & Information Security Policy.
5. Incident response and business continuity recommendations.
6. Employee training and management handover.
7. Proposal for ongoing cybersecurity monitoring and support.
### Engagement
Initial assessment and implementation project, with the possibility of an ongoing monthly services agreement.
**To Apply**
Please provide a brief overview of your experience, relevant certifications, examples of similar projects, your proposed approach, estimated timeline, and fee structure.
We are looking for a hands-on professional who can take ownership of the implementation and help establish a secure, scalable IT environment.
Hourly rate:
25 - 100 USD
4 days ago
IT & Networking, Information Security & Compliance
I'm seeking a skilled IT professional to help troubleshoot and resolve network issues, specifically intermittent outages.
Key requirements:
- Expertise in diagnosing and fixing network problems
- Experience with various networking hardware and software
- Ability to work on-site or remotely, as needed
- Strong problem-solving skills and attention to detail
Ideal skills and experience:
- Certifications such as CCNA or CompTIA Network+
- Previous experience in a similar role
- Excellent communication skills to explain issues and solutions
Please provide a detailed plan of action and relevant experience in your bids.
I have a brand-new security assessment tool ready for field testing and I want to place it in the hands of experienced ethical hackers. Your job is to put the tool through your own cyber ranges, labs, and engagements.
During the engagement you will:
• Utilize a CLI tool.
• Document every finding, usability issue, crash, or false positive you encounter.
• Deliver a concise report that includes reproduction steps and recommendations for improvement.
I am hiring multiple freelancers because I want perspectives from different platforms and environments. When you apply, be very specific about the stacks, operating systems, devices, and types of engagements you know best. The clearer you are, the sooner I can match you to a test scenario and set you up with access credentials.
If you enjoy hands-on pen-testing, vulnerability assessment, or security auditing and would like to influence the shape of an emerging tool, I would love to work with you.
PROJECT
Full-Scope Penetration Testing on a Self-Built Vulnerable Lab
Project Objective
Design and deploy a multi-machine vulnerable network lab using VMs, conduct a complete black-box penetration test following the PTES (Penetration Testing Execution Standard) methodology, exploit real CVEs, and produce a professional penetration testing report identical to what consulting firms deliver to clients.
Project Details Table
Attribute Details
Full Title Full-Scope Black-Box Penetration Testing: Vulnerable Enterprise Network Simulation
Domain Ethical Hacking + Penetration Testing + Vulnerability Assessment
Difficulty (Advanced)
Duration 10–12 weeks
Team Size 1–2 students
Publication Scope GitHub (sanitized) + Blog writeup + TryHackMe/HTB profile
Resume Line “Designed a 5-machine vulnerable enterprise lab; conducted full-scope pentest exploiting 12 CVEs including MS17-010 and Log4Shell; delivered 60-page professional pentest report”
Tools & Technologies
Category Tools
Attacker OS Kali Linux 2024
Vulnerable Targets Metasploitable 2/3, DVWA, VulnHub VMs, custom Windows Server 2016 VM
Hypervisor VirtualBox / VMware Workstation (free)
Reconnaissance Nmap, theHarvester, Maltego CE, Shodan API
Vulnerability Scanning OpenVAS (free), Nessus Essentials (free for 16 IPs)
Exploitation Metasploit Framework, ExploitDB, custom Python exploits
Web App Testing Burp Suite Community, SQLmap, Nikto, OWASP ZAP
Post Exploitation Mimikatz, BloodHound, PowerSploit, Impacket
Password Attacks Hashcat, John the Ripper, Hydra
Reporting Dradis CE (free) / PlexTrac / MS Word
AI Assist ChatGPT / Claude for payload suggestions + report writing
Lab Architecture
Machine OS Role Vulnerabilities
Attacker Kali Linux Penetration tester machine —
Target 1 Metasploitable 2 Linux server 50+ known vulns
Target 2 Windows 7 SP1 VM Workstation MS17-010 (EternalBlue)
Target 3 DVWA on Ubuntu Web app server SQLi, XSS, CSRF, LFI
Target 4 Windows Server 2016 Active Directory DC Kerberoasting, Pass-the-Hash
Target 5 Log4j Vulnerable App Java web app Log4Shell (CVE-2021-44228)
Senior DevSecOps/Security Mentor and Interview preparation
Applied
$10 - $20
/ hr
5 days ago
3
I'm a DevOps engineer (up to 3 years, AWS/Terraform/CDK/Python/Docker). I need someone with Lead/Senior experience in DevOps/Platform Engineering who knows how these technical interviews work. I would require guidance and support for success along with mock interviews.
I’m setting up a series of real-time, online sessions for a group of advanced professionals who already know their way around firewalls, SIEM dashboards, and basic pen-testing tools. They now want to push further into three areas: hardened network security architectures, offensive techniques in ethical hacking, and disciplined incident response that stands up under pressure.
All classes need to be delivered live through a platform such as Zoom or Microsoft Teams so participants can ask questions, share screens, and work through hands-on labs in real time. I’ll handle the scheduling and enrolment; you focus on building a cohesive curriculum, presenting the material, and supplying any virtual lab images, slide decks, and reference notes we can share afterward.
To ensure we meet the bar for seasoned practitioners, please weave in current frameworks (MITRE ATT&CK, NIST CSF), up-to-date threat intel, and demonstrations using popular toolsets—think Wireshark, Nmap, Metasploit, and an EDR of your choice—without spending time on beginner basics.
Deliverables
• A detailed syllabus outlining session objectives and required tooling
• Live instruction (approx. 10–12 hours spread over multiple slots) with interactive labs
• Post-class resources: slides, recorded sessions, and lab walkthroughs
• A short assessment or capture-the-flag style challenge to validate learning
If you’re an engaging trainer who thrives on deep technical Q&A and live demos, let’s talk dates and any platform requirements you may have.
I must obtain PCI DSS certification and need a full penetration-testing engagement that satisfies Requirement 11.3. This covers both external/internal network assets and customer-facing or internal web/mobile applications.
Scope
• Map the card-holder data environment, then execute comprehensive network and application tests (black-box and authenticated where applicable).
• Exploit, not just scan, to prove impact while maintaining evidence for auditors.
• Re-test once fixes are applied to confirm closure.
Deliverables
• Formal methodology and test plan aligned with PCI DSS 4.x.
• Detailed vulnerability report with risk ratings and reproducible PoCs.
• Executive summary for management and a technical appendix for engineers.
• Remediation recommendations prioritised by risk.
• Attestation of penetration test completion suitable for submission to my QSA.
I will grant VPN or on-site access, plus staging credentials for application testing. All testing must respect our change-control windows and be performed with Burp Suite, Nmap, Metasploit, or equivalent industry-standard tools. Data collected must remain confidential and deleted after sign-off.
Please indicate your testing framework, sample redacted reports, and estimated duration for initial test and follow-up verification.
Skills: Web Security, Testing / QA, Computer Security, Internet Security, Penetration Testing, Network Security, Compliance Auditing, Security Auditing
Fixed budget:
250 - 750 USD
5 days ago
Websites, IT & Software, Business, Accounting, Human Resources & Legal, Web Security, Testing / QA, Computer Security, Internet Security, Penetration Testing, Network Security, Compliance Auditing, Security Auditing
I need help with a quick task to set up our blog website, royalcleanlaundryblo.vibepreview.app, so it routes to our main website. I believe this involves updating DNS settings through GoDaddy. The work should be simple and straightforward, and I’m looking for someone who can complete it in 1–2 hours. Please let me know if you can help with this quickly. Our budget is about $25.
Charity organisation seeking a freelancer to assess the security of our website and sensitive data. The work includes identifying vulnerabilities, reviewing current security measures, and providing clear recommendations for improvement. We are looking for someone who can work independently, communicate findings clearly, and help strengthen our overall security posture. Experience with similar projects and a proactive approach to security are important.
Budget:
not specified
5 days ago
IT & Networking, Information Security & Compliance
I am currently looking for a cybersecurity professional with strong expertise in social media security. Specifically, I am seeking an expert who can immediately remove and take down fraudulent advertisements and scam content proliferating across social media platforms and Google search results.
While we have been diligently reporting these scams manually, the platform response times are too slow. As the volume of these malicious ads continues to grow, the damage is escalating rapidly.
We urgently need a specialist who can help us address this issue effectively and swiftly. Any assistance or guidance you can provide would be greatly appreciated.
Thank you for your time and consideration.
Client's questions:
Can you expedite the removal of malicious social media accounts? Do you have a proven track record with this kind of enforcement?
Fixed budget:
100 USD
5 days ago
IT & Networking, Information Security & Compliance
Penetration testing of EduTech startup based in Europe - Coast
Applied
not specified
5 days ago
3
Hi all,
We're a small EdTech startup in Europe and would like a grey-box penetration test of our web app before a wider launch. Before we go further, I'd like to know how many hours you'd estimate and what fixed price you'd charge.
What's in scope:
- The web app (React) and its API (Python/FastAPI, around 100 endpoints)
- Sign-in (email and Google sign-in), sessions and tokens
- Access between users: whether one student can reach another student's courses, files, chats or saved data
- File uploads (PDFs, images and documents)
- The AI tutor: prompt injection, leaking other users' data or its own instructions
- Whether a student account can reach the admin area or get around plan and usage limits
How it would work:
- Testing on a staging copy with made-up accounts only, no real user data
- You'd get test student accounts and the API documentation
- Out of scope: load or DoS testing, and our hosting and AI providers' own systems
- Written permission to test and an NDA signed before starting
- We'd prefer a fixed-price contract in two milestones: the report, then a retest after fixes
Could you tell me:
1. How many hours you'd estimate, and your fixed price for this scope
2. Roughly how much of it is hands-on testing and how much is automated scanning
3. Whether a retest after fixes is included
4. A sample report with client details removed
5. A verification link for your certifications
6. When you could start and how long it would take
Thanks,
Andrea
Budget:
not specified
5 days ago
IT & Networking, Information Security & Compliance