Web Security Jobs

I’m looking to have my personal portfolio site built to the same standard I expect from the enterprise products I oversee. The public-facing portion will be a concise 3–4 page experience presented in a professional, corporate aesthetic with a touch of tasteful interactivity—subtle hover effects, smooth section transitions, no flashy animations that distract. Public pages • About Me • Skills & Areas of Expertise • Experience (role highlights only; no employer names) Secure knowledge hub Beyond the public pages I need a gated area that sits behind a login screen. Registered users (each with their own credentials) will gain access to: • Blog articles I publish • Slide decks / presentations (PDF or embedded) • A growing knowledg...

I am looking for a freelancer to develop a solution to bypass Cloudflare's 1015 error (rate limit exceeded). The task involves setting up auto-rotating proxies or any relevant system to effectively handle the issue. Ideal candidates should have experience with proxy systems, rate limit bypassing, and Cloudflare configurations.

Web App & API Vulnerability Research I would like to assess your Web Application and API for security vulnerabilities that could affect your platform or its users, either now or in the future. The fixed pricing can be discussed later, as it will depend on the severity and impact of any vulnerabilities discovered. Critical vulnerabilities may require more effort than minor issues. Regardless of the findings, I aim to keep my pricing fair, affordable, and competitive. Best regards

I need an experienced cyber-security specialist to perform a fully authorized penetration test on our corporate website. Your task is to breach the system’s defences under controlled conditions, document every step, and securely extract the specific “kết quả” data set I will identify once we start. Scope • Map the site’s attack surface, exploit viable vulnerabilities, and demonstrate a complete, reproducible path to the target data. • Keep all actions inside the agreed-upon boundaries of the corporate domain; no neighbouring infrastructure should be touched. • Provide a comprehensive report that includes exploited vectors, privilege-escalation methods, recommended remediations, and the successfully retrieved data in an encrypted archive. A...

My Gmail account was recently compromised and I’ve been locked out ever since. I already completed Google’s account recovery form, but the automated process has not restored my access. Time is critical and I need someone who knows the ins-and-outs of Google’s security workflow—device verification, backup codes, and support escalation—to get me back in as soon as possible. What I expect from you • Regain full, secure access to the account (inbox, Drive, and linked services). • Remove any unauthorized sessions or forwarding rules the attacker may have set. • Reinforce security with a fresh, strong password and two-factor authentication. • Provide a concise set of instructions so I can keep the account—and connected devices&mdas...

My WordPress website was hacked. My hosting provider did not run any malware/antivirus scans and did not keep WordPress core or plugins updated. Rather than cleaning or recovering the site, they took it offline, zipped the files, and sent them to me. The domain is no longer active. I now have a ZIP file (approximately 19GB) containing what I believe are my WordPress site files, but I have no way to unzip, inspect, or recover the content on my own. File access: Given the size, I cannot attach this file directly on Guru. I will share a private cloud storage download link (Google Drive or Dropbox) with the freelancer I hire — please do not ask for the file to be attached publicly, since it may still contain compromised/malicious code from the original hack. Please confirm you have...

My Facebook page was recently compromised and I can no longer log in. I normally sign in with my phone number, but when I attempt the standard recovery flow Facebook never sends the verification code, so I’m stuck at the first hurdle. I need someone who already knows the current Facebook Business & Support workflows, appeal forms, and identity-verification tricks that actually work in 2024. The goal is simple: get me back in as the rightful admin and lock the intruder out for good. Key deliverables: • Regain full admin access to the page and linked profile • Remove any unauthorized users or apps the hacker added • Configure safer recovery options (new phone, trusted contacts, 2-factor) • Provide a brief, plain-English summary of the steps you too...

Project Overview We are looking for an experienced AI Automation / Full-Stack Developer to build a self-hosted AI Business Operating System that automates email management, CRM, sales, marketing, customer support, and business workflows. This is a long-term project with multiple milestones. Phase 1 – Infrastructure Install and configure: Debian 12 Webmin Docker & Docker Compose Nginx SSL (Let's Encrypt) PostgreSQL PGVector Redis Python Node.js Git n8n Ollama Claude API OpenAI API Automated backups Monitoring Phase 2 – AI Knowledge Base Create a searchable AI knowledge base that can ingest: Websites PDFs Word documents Excel files SOPs Product catalogs Pricing Technical manuals Features: OCR Document parsing Chunking Metadata Embeddings Version control PostgreS...

I need assistance setting up a VPN and a Windows-based file server, along with creating an information security plan. Key Tasks: - VPN Setup: Configure VPN server and client, and manage user access control. - File Server Setup: Set up a Windows file server. - Security Plan: Develop a robust information security plan. Ideal Skills: - Experience with VPN and Windows file servers. - Strong knowledge in information security. - Familiarity with user access control and configuration tasks.

I need a fully-functioning staging environment for my website built inside AWS. The goal is to let me test new features safely before they ever reach production, so the staging copy must mirror the live site in look, performance, and basic integrations. Here’s what I expect: • A separate AWS account or clearly isolated VPC that will not interfere with production resources. • Clean deployment of the site’s codebase and assets to that new environment. I’m open to EC2, S3, a managed database, or any combination you recommend, as long as the final result matches the live site’s behaviour. • Best-practice security (private key access, least-privilege IAM roles, HTTPS). • A straightforward way for me to push updates to staging—Git-based ...

I’m ready to move my career into cybersecurity, specifically application security, and I’m looking for a mentor who can guide me step-by-step. My goal is to understand secure coding practices, common web and mobile vulnerabilities, and the tools we use to detect and remediate them—everything from static analysis scanners to OWASP testing methodologies. Because I learn best through conversation and immediate feedback, I’d like live, one-on-one sessions, ideally once or twice a week, with practical homework in between. I already have a solid general IT background, so you can dive straight into topics such as threat modeling, secure SDLC integration, and real-world vulnerability triage. Deliverables I’d like to see: • A personalized learning roadmap ...

More details: What is the primary goal of the POSH awareness website? Educate employees What type of educational content do you want to include? Interactive quizzes Do you need the interactive quizzes to provide instant feedback on answers? Yes

We are looking for an experienced cybersecurity expert to perform a comprehensive security assessment of our Python-based web application and infrastructure. Project Scope - Conduct a complete security audit of our application. - Identify vulnerabilities in the web application, APIs, database, and server. - Perform penetration testing and vulnerability assessment. - Review the application against the OWASP Top 10. - Analyze authentication, authorisation, session management, and input validation. - Review API security and identify potential attack vectors. - Assess SQL injection, XSS, CSRF, SSRF, IDOR, file upload, and other common vulnerabilities. -Review Linux server configuration and security hardening. - Assess cloud security configuration (if applicable). - Review source code for sec...

Find and sign up to good and reliable, Australian based host for website and emails. Create at lest 3 emails addresses on that site Transfer a website onto that site and ensure I have sole control over it and all emails. Log onto 2 email web based addresses being @ and @ and restore access to them for me. Change passwords to those two emails Finally, log onto two computers in Australia via something like "anydesk" etc and establish emails and website access, completely have set up, update Outlook and install both emails on it.

My team needs immediate, reliable help keeping our office PCs running smoothly. The first priorities are: • Windows installation with the right drivers and essential software • Network troubleshooting, including Wi-Fi configuration and printer/scanner connectivity • Remote desktop support alongside hands-on hardware diagnostics and repairs Once those are stable, I’ll also count on you for Microsoft Office and email setups, PC performance tuning, virus and malware removal, and light LAN/WAN checks whenever they crop up. I can arrange both on-site visits in our workspace and secure remote sessions, so flexibility is important. What matters most is fast, professional resolution with clear status updates—ideally problems are diagnosed and fixed in the same s...

I need a forensic expert to analyze network traffic for suspicious activity, with a focus on compromised web data. Key Tasks: - Monitor and analyze network traffic, both internal and external. - Identify and investigate indicators of compromise, particularly web data breaches. - Provide detailed reports on findings and recommendations for securing vulnerabilities. Ideal Skills and Experience: - Expertise in network forensics tools (e.g., Wireshark, Snort). - Strong understanding of web protocols and traffic patterns. - Experience in identifying and mitigating security threats. - Ability to produce clear, actionable reports. Looking for a professional who can help enhance our security posture. Loooking to have a background in iPhone and cell security.

I’ve just finished a manual sweep of my WordPress installation and uncovered several hidden phishing pages. The job is straightforward but critical: locate every phishing file or URL on the server, remove or neutralise them without disturbing legitimate content, and explain the infection path so I can prevent a repeat. The site runs the latest public WordPress core, but themes and a few plugins may be outdated. I have full cPanel, FTP/SFTP, and phpMyAdmin access ready as soon as we agree on the approach. Feel free to use tools such as Wordfence, Sucuri, WP-CLI, or your own scripts—whatever lets you trace all malicious payloads quickly and thoroughly. Deliverables: • Complete removal of every phishing page and any related malicious code. • Documentation outlining wha...

My esports tournament platform needs a thorough penetration test completed within four days. The stack combines a Supabase/PostgreSQL back end, REST/GraphQL-based APIs, user accounts, an admin console, and a wallet that handles deposits, withdrawals, and payment-gateway traffic. Primary focus is the payment gateway and wallet layer, yet I still want every public or privileged surface probed against the full OWASP Top 10 as well as common esports-specific attack patterns. That includes: authentication and authorization flows, admin privilege escalation, API abuse, IDOR, SQLi, XSS, insecure file uploads, exposed secrets, and verification of Supabase row-level security. Attempted manipulation of balances or tournament results is welcomed if it highlights a weakness. When the engagement en...

I need a Laravel-based website that presents our organisation’s information clearly while meeting strict security standards upto 20-25 pages. The build must include end-to-end SSL/TLS encryption and a working two-factor authentication flow for all admin or sensitive entry points. Beyond those essentials, I am open to your guidance on any additional best-practice hardening you normally apply. The site itself is strictly informational—think pages such as About, Services, News, Resources and Contact—but I still want a clean CMS-like backend so our team can update text and images without touching code. We’ll decide on the exact look and feel together once we review a few mood-boards; the visual direction is still flexible. Key deliverables • Responsive Laravel ...

My team needs immediate, reliable help keeping our office PCs running smoothly. The first priorities are: • Windows installation with the right drivers and essential software • Network troubleshooting, including Wi-Fi configuration and printer/scanner connectivity • Remote desktop support alongside hands-on hardware diagnostics and repairs Once those are stable, I’ll also count on you for Microsoft Office and email setups, PC performance tuning, virus and malware removal, and light LAN/WAN checks whenever they crop up. I can arrange both on-site visits in our workspace and secure remote sessions, so flexibility is important. What matters most is fast, professional resolution with clear status updates—ideally problems are diagnosed and fixed in the same s...

I'm looking for a skilled web designer to create a professional and user-friendly website for my real estate broker platform similar to nobroker, magicbricks and 99acres, it shall have most advanced search features. Bifurcate the window into two access 1. Rent, Lease, sale Residential Buildings Commercial Buildings Commercial Land Agriculture Land Residential Land Convention Hall Resorts 2. Sale Business Transfer/Lease Job work Subcontractor Building Material Supplier Seller/landlord will upload the details of property, it will be searched by buyer with advanced features prescribed later.

My site is up, the content is set, and what I need now is reliable, hands-on management that keeps everything running fast, secure, and search-friendly. The job centres on three intertwined areas: • Routine upkeep – run core and plugin/software updates as they roll out, keep an eye on uptime, and apply any security patches before they become an issue. • Performance tuning – squeeze every millisecond you can from page-load times through caching, image optimisation, and database clean-ups. • Security vigilance – schedule regular scans, tighten configurations, and make sure automated backups are healthy. On the SEO side, my focus is strictly on-page and technical work. I want sharper keyword optimisation, cleaner URL structures, and properly written meta...

A complete security evaluation of my digital environment is required, carried out under strict ethical-hacking guidelines. The assignment covers scoping the targets with me first, launching controlled attacks to uncover real-world vulnerabilities, and then documenting every finding with proof-of-concept steps, risk ratings, and practical remediation advice. All testing must remain within the agreed boundaries and comply with legal standards. I will supply the necessary access details and any supporting documentation once we sign an NDA. The final deliverable is a concise yet comprehensive report that I can hand directly to my development and operations teams. Success is measured by: • depth and accuracy of the vulnerability coverage • clear reproduction steps for each issue...

I’m dealing with a handful of unwanted URLs that appear on Google and other major search engines whenever my name or company is searched. There are 7 negative links on the first page, all from very high authority websites (DA 80+). I’m not interested in generic reputation-building campaigns right now; my sole focus is on making those specific pieces of negative content disappear or at least become unfindable to the average user. You should already have a proven track record of successfully removing, de-indexing, or burying troublesome links—whether through direct takedown requests, DMCA filings, right-to-be-forgotten petitions, suppression techniques, or any other legitimate method that works. White-hat approaches only; I don’t want short-lived fixes that could bac...

My site is dropping the ball the moment a visitor opens more than one tab: sessions are not being created and the localStorage logic unravels, leaving users effectively logged out before they even begin. I need someone who knows JavaScript inside out and understands the security nuances of cookies, localStorage, sessionStorage and token-based auth. You’ll start by pinpointing why the session handshake is failing when a second tab spawns, trace any race conditions or storage conflicts, then patch the logic so a single, secure session is established and recognised everywhere. I need airtight handling here—no duplicated tokens, no accidental overwrites and absolutely no leakage of sensitive data. Deliverables • Root-cause report with the broken flow mapped out &bull...

I provide professional Vulnerability Assessment and Penetration Testing (VAPT) services for web applications, APIs, and network environments. My testing follows the OWASP Web Security Testing Guide and industry best practices to identify security vulnerabilities before they can be exploited. Services include: * Web Application Penetration Testing * API Security Testing * Authentication & Authorization Testing * Business Logic Testing * OWASP Top 10 Assessment * SQL Injection, XSS, CSRF Testing * File Upload Security Testing * Security Headers & Misconfiguration Review * Sensitive Information Disclosure Assessment * Session Management Review Tools Used: Burp Suite Professional, Nmap, Nuclei, OWASP ZAP, ffuf, httpx, and manual testing techniques. Deliverables: * Executive Summar...

I oversee a handful of content-heavy blogs powered by a custom PHP CMS and need a reliable developer to keep them fast, secure, and search-friendly. Your core mission is to handle ongoing technical upkeep so I can stay focused on publishing. The work spans four key areas: • Page-load speed – Tweak code, database queries, caching, CDN and any front-end assets until the sites meet Core Web Vitals targets (LCP under 2 s on mobile). • SEO & EEAT support – Implement on-page fixes, schema, internal-link refinements and any technical changes that strengthen Expertise, Experience, Authority and Trust signals. • Security vigilance – Monitor for vulnerabilities, patch PHP libraries, harden the server stack (firewall rules, SSL, backups) and ac...

Fix my blog/website store , which presents at the moment the following: Notice: Function _load_textdomain_just_in_time was called incorrectly. Translation loading for the aliexpress domain was triggered too early. This is usually an indicator for some code in the plugin or theme running too early. Translaions should be loaded at the init action or later. Please see Debugging in WordPress for more information. (This message was added in version 6.7.0.) in /home/sites/20a/f/f00f9b8456/public_html/wp-includes/ on line 6121 Notice: Function _load_textdomain_just_in_time was called incorrectly. Translation loading for the wc-eway domain was triggered too early. This is usually an indicator for some code in the plugin or theme running too early. Translations should be loaded at the init action...

My five-person consulting firm needs a dependable partner who can handle our day-to-day IT environment entirely off-site. While we will continue to lean on you for onboarding and security matters, the area that will make or break this relationship is ongoing IT support; keeping us up and running without hiccups is the priority. Here is what the engagement looks like from my side: • On an average month you will perform regular system maintenance, jump in quickly to troubleshoot anything that crops up, tune performance so laptops stay snappy, and spin up new machines or cloud user profiles whenever we add a team member. • Remote desktop tools, monitoring and management software, and solid security software should already be in your toolkit so you can diagnose issues, patch syst...

I am looking for an experienced cybersecurity specialist to assist with the recovery of a compromised Instagram account. The client has reported that their Instagram account was taken over by an unauthorized party. The account credentials were changed, and a third-party two-factor authentication method was enabled, preventing the original owner from accessing the account. The objective is to assess the situation and assist with legitimate account recovery through Meta's official recovery process. This is not a request to hack or bypass Instagram's security. Requirements: Experience with Instagram or Meta account recovery. Strong background in cybersecurity or incident response. Knowledge of account takeover investigations. Ability to advise on securing the client's email...

Tarvitsen kokonaisratkaisun, jossa nykyinen ekoloiste.fi-sivusto siirretään uudelle domainille sekä sisällön että ulkoasun osalta. Samalla vanha domain ohjataan uuteen, jotta vanhat linkit toimivat saumattomasti. Toimitukseen kuuluu myös toimiva ajanvarausjärjestelmä, jossa on • kalenteri-integraatio (valittavissa esim. Google, Outlook tai muu suosittelemasi) • automaattiset muistutusviestit asiakkaille ennen varattua aikaa Minulla ei ole ennakkosuosikkia alustalle, joten valitse ratkaisu, jonka osaat toteuttaa luotettavasti ja jota pystyn jatkossa itse hallinnoimaan ilman monimutkaisia lisenssejä. Odotan, että 1. kopioit kaiken sisällön ja visuaalisen ilmeen tarkasti 2. siirrät/ohjaat vanhan domainin vi...

Despliegue de aplicación web estática en VPS con HTTPS y protección de acceso. Descripción del proyecto Busco un profesional con experiencia en administración de servidores Linux y despliegue de sitios web estáticos para publicar una aplicación ya desarrollada en un servidor privado (VPS). La aplicación ya está terminada y funcionando. No se requiere desarrollo adicional ni creación de backend en el servidor. El trabajo consiste en configurar el VPS, desplegar los archivos estáticos, configurar el dominio y HTTPS, y dejar una capa de protección para el panel de administración. Importante: entregaré una guía de despliegue paso a paso ya preparada, incluyendo el Caddyfile con la prote...