freelancepentester.com

A senior freelance pentester for firms with more work than testers.

For more than ten years I have joined larger pentest firms as a contractor on scoped web application and external infrastructure engagements: your methodology, your report template, your client.

Experience
10+ years of freelancing for larger pentest firms. 15+ years of pentesting and red teaming overall, much of it for regulated financial institutions.
Research
Multiple published CVEs
Based in
EU, CET / CEST
Works as
Solo contractor

Capacity for the next 8 weeks

7 of 8 weeks can take new work. Updated 5 November 2026.

  1. Week 45from 2 NovBooked
  2. Week 46from 9 NovA few days
  3. Week 47from 16 NovOpen
  4. Week 48from 23 NovOpen
  5. Week 49from 30 NovA few days
  6. Week 50from 7 DecOpen
  7. Week 51from 14 DecOpen
  8. Week 52from 21 DecOpen

A contract penetration tester for your peak periods

I have worked as a contract penetration tester for larger pentest firms for more than ten years, mostly through referrals and platforms. I built this site to reach firms like yours directly: firms that have sold more engagements than their team can deliver.

Think of it as overflow capacity without a new hire. You hand over scope, access and rules of engagement. I run the test and return a finished report for your lead to review.

Penetration testing services I deliver end to end

What a pentest contractor takes off your plate, from kickoff to accepted report.

Web application penetration testing

Authenticated and unauthenticated, including business logic, access control and session handling.

External infrastructure penetration testing

Internet-facing perimeter: exposed services, remote access, mail and DNS, with manual validation of scanner output.

Methodology

  • OWASP WSTG
  • Or your in-house methodology

Tooling

  • Burp Suite Professional
  • Nessus
  • Kali Linux

Pentest reporting

A complete report in your template, under your firm's name: executive summary, technical findings with evidence, and remediation guidance.

Working together

Rates
One day rate for all engagement types
Non-solicit
Yes. Your clients stay yours.
Contracts
I sign your NDA, contractor agreement and SOW
Outsourcing
None. All testing is done by me personally.
Volume
From a single engagement to recurring peak-period work

Security and client data handling

How your clients' data is handled.

Environment
Encrypted, dedicated testing environment per client
Source IPs
Shared before testing, for allow-listing and log correlation
Communication
Via channels you approve

Availability and logistics

See the capacity board for the coming weeks.

Lead time
Typically within 5 business days of a signed SOW, subject to capacity
Hours
CET/CEST, with some flexibility
Location
Remote.

How we start

  1. Mutual NDA

    Yours or mine

  2. Agreement and SOW

    Your contractor agreement and a first scoped engagement

  3. Delivery

    Testing, report and a short debrief

FAQ for pentest firms

What are your rates?

One day rate for all engagement types, the same for web application and external infrastructure tests.

How quickly can you start, including for last-minute pentest overflow work?

Typically within 5 business days of a signed SOW, depending on capacity. See the capacity board. Once an NDA and contractor agreement are in place, a short SOW is enough, so it pays to set those up before your peak period. A small web application test often makes a good first engagement, as it gives us a chance to align on your reporting standards.

What types of penetration tests do you specialize in?

Web applications and external infrastructure. I have 10+ years of freelancing for larger pentest firms and 15+ years of pentesting and red teaming overall, much of it for regulated financial institutions.

We are a US-based firm. Have you worked with American teams before?

Yes. I have worked extensively in multinational organizations, often with and under American management, and I have extensive experience delivering penetration tests as a third party.

Can you follow our methodology, rules of engagement and reporting standards?

Yes. I work to your methodology, rules of engagement and report template, run the test end to end with minimal supervision, and sign a non-solicit on your clients.

Can you take over part of a larger engagement?

Yes, as a clearly separated workstream, for example the web application or the external perimeter, with its own scope, access and test window. I report the findings for my part to your lead in your format, so it is always clear who tested what.