Comprehensive Security Check for my Platform

Penetration Testing, Cloud Security, Certified Ethical Hacking, Security Auditing · Security Audit and Penetration Testing for Web and Mobile Application

Project Overview

I am looking for an experienced security auditor and penetration tester to perform a comprehensive security audit of a web application and mobile application.

The application handles sensitive user and platform data through a backend database. The main objective of this project is to identify security vulnerabilities and, most importantly, verify that unauthorized users cannot access data or functionality that they are not permitted to access.

The primary focus is on backend authorization, API security, database access control, authentication, privilege escalation, and protection against unauthorized data access.

Main Security Requirement

I need to verify that a normal user cannot access another user’s private or restricted information by manipulating API requests, IDs, parameters, requests, or other application components.

For example:

* User A must not be able to access User B’s private information. * User A must not be able to access User B’s products or records. * User A must not be able to access User B’s chats or messages. * User A must not be able to access User B’s rental or trans