Explorar las categorías
Explora
Fiverr Pro
Español
$
USD
I will scan your java app for security vulnerabilities
Acerca de este Servicio
Outdated dependencies are the #1 way Java applications get breached and most projects have vulnerable libraries their developers don't know about.
I'll scan your Java project (Maven or Gradle) using OWASP Dependency-Check, the industry-standard tool backed by the National Vulnerability Database, and deliver a clean, professional report you can actually act on not a raw tool dump.
What you get:
- Complete inventory of your dependencies and which ones are vulnerable
- Every CVE identified with severity rating (Critical/High/Medium/Low)
- Plain-English explanation of what each vulnerability means for YOUR app
- (Standard+) Exact upgrade paths which version fixes which CVE
Why me: I trained in software security at the university level, where my capstone project involved scanning a Spring Boot financial application, triaging 190 CVEs across 49 dependencies, and delivering a formal remediation report. I'm also a U.S. Army veteran I take documentation and accuracy seriously.
Your code stays confidential and is deleted after delivery. Message me before ordering if you're unsure whether your project qualifies.
Tecnología de desarrollo:
Java
Experiencia:
Código limpio
•
Manejo de errores
•
Otros
Mi porfolio
Otros servicios de QA y revisión que ofrezco
FAQ
Do you need my full source code?
No. The scan works from your build configuration and dependency tree — pom.xml or build.gradle files (plus module-level build files) are enough. Send only those if you prefer to keep your application logic private.
Will you fix the vulnerabilities for me?
The report tells you exactly what to upgrade, with version numbers and breaking-change notes, so your team can apply fixes as a checklist. The Fix & Verify tier includes a re-scan after your fixes to confirm every CVE is closed.
Does this work for Kotlin or Scala projects?
Yes - any project that builds with Maven or Gradle, regardless of JVM language.
What tool do you use, and why should I trust the results?
OWASP Dependency-Check, the industry-standard open-source scanner, checked against the National Vulnerability Database. But the value isn't the tool — it's the triage. I manually review every finding to remove false positives and rate real-world risk for how your project actually uses each library.
My project is private/proprietary. How do you handle confidentiality?
Your files are used only for the scan and deleted after delivery. I'm happy to sign an NDA. And again — build files alone are sufficient, so your source code never has to leave your machine.
How is this different from just running the scanner myself?
You absolutely could — it's free and I'd encourage learning it. What you're buying is the setup (NVD API configuration, suppression files), the false-positive triage, and a report your team or stakeholders can act on without anyone spending a day decoding raw CVSS output.
