We Find Vulnerabilities for a Living, Not Just for Clients

Pentestwell was founded by practitioners who spend as much time on independent security research as on client engagements. The techniques we use in bug bounty and CVE research are the same ones we bring to every paid engagement.

Fahad Abdullah Munir

Founder & Principal Consultant

5+ years running full-scope penetration testing engagements, web, API, mobile, and Active Directory, for fintech, SaaS, and enterprise clients across Estonia, Saudi Arabia, and the United States.

Independent security researcher with 5 assigned CVEs, ranked Top 4 in Pakistan on HackerOne (Q1 2025) and Top 100 globally by reputation (Q3 2025), with vulnerabilities credited by Apple, Jotform, and Duke University.

Certified: PNPT (TCM Security), eCPPTv2 (INE), CAP (SecOps Group), API Penetration Testing (APIsec University).

Umar Siddique

Security Consultant

Senior Penetration Tester, Red Teaming Expert

Certified: OSCP, PNPT, eMAPT, eCPPTv2.

How We Work

We scope like attackers, not like a sales team trying to upsell hours. We report so your engineers and your board both understand what's actually at risk. And we retest critical fixes for free, because a report nobody verifies isn't worth much.