I'm Emad Bahtit – freelancer for Test Automation, Security Testing and Test Management. I help teams secure releases: stable E2E suites, OWASP tests with actionable reports, QA processes based on recognized standards.
$ npx playwright test --project=chromium
✓ login.spec.ts
✓ checkout.spec.ts
✓ api-contracts
Allure report generated (sample output)
$ nuclei -t owasp-top10 -u $TARGET
[medium] missing security headers → fix documented
[retest] finding fixed ✓Evidence + repro steps + fix guidance. Report with CVSS, PoC and retest included.
FOCUS AREAS • TOOLS
SERVICES
Book modular – from focused sprint to managed QA. Clear acceptance criteria, weekly reporting, retest included.
Stable UI, API and E2E suites for Web & Mobile. CI/CD-integrated, with flaky analysis and Allure dashboard.
Web app, API and network tests per OWASP & NIST. Lean report with CVSS, PoC and fix guide – no 200-page PDF.
Strategy and control for teams of 3 to 50. Risk-based and traceable.
TYPICAL ENGAGEMENTS
Typical engagement types. Scope and details are agreed in the discovery call.
E2E automation and traceable tests for portals with roles, approvals and process rules.
UI and API automation for data-intensive dashboards and lab interfaces, including contract tests.
Web and API tests based on OWASP ASVS with a prioritized report and retest.
Master test plan, traceability and release criteria for structured delivery.
Contract tests and load profiles for high-throughput interfaces.
Automated regression and accessibility checks (WCAG) for application flows in web portals.
PROCESS
30-min call, goals, assets, risks. Fixed offer with acceptance criteria. NDA as standard.
Automation / security testing / management. Weekly status, dashboard, findings live instead of big-bang.
Prioritized report, dev support, retest, knowledge transfer. Maintenance / managed QA on request.
ENGAGEMENT
Final price after free scoping. NDA and retest option available in every model.
for 1 clear goal
for release teams
for continuous quality
TOOLSTACK
Playwright, Cypress, Selenium, Appium, RestAssured, Postman
Burp Suite, OWASP ZAP, Nmap, Nuclei
Jira, Xray, Zephyr, TestRail, Confluence
Jenkins, GitLab CI, GitHub Actions, Docker, Allure
PROFILE
I deliver more stable releases and more secure systems. I build automation teams actually use, find security gaps early, and bring structure to QA.
FAQ
Discovery call (30 min), then scope doc with goals, assets and timeline. Minimal access via NDA only – test accounts usually suffice. Start by arrangement.
Prioritized report with CVSS, evidence, repro steps and fix guidance – plus retest of your fixes and short dev Q&A. No unverified scanner exports.
Yes – coaching, test plan reviews, Jira/Xray setup and release gates. Goal is your team ships stably on its own afterwards.
NDA upfront, data minimization, EU tooling on request, deletion concept after project end. All findings via encrypted channels only.
After free scoping you get a fixed-price offer – or a daily rate for managed QA. Retest option available.
CONTACT
Reply in < 24h. Discovery call (30 min) free & non-binding.