Application Penetration Testing

I need a focused penetration test against one of my applications. The engagement is limited strictly to the application layer—no network or infrastructure testing—so I expect you to probe for the kinds of issues highlighted in the OWASP Top 10 and similar standards.

Here’s how I picture the engagement:

• Pre-engagement call to confirm scope, test window, and rules of engagement
• Hands-on testing that blends automated scans (Burp Suite, OWASP ZAP, or your preferred tools) with manual verification and exploitation where safe
• A concise yet comprehensive report that includes an executive summary, risk ratings (CVSS v3 or equivalent), step-by-step reproduction, screenshots or PoC scripts, and clear remediation guidance
• An optional debrief session to walk me through the findings and answer questions

Timeline is flexible but I’d like testing wrapped up within a week of kickoff and the report delivered shortly after.

When you reply, focus on your experience with application security testing—particularly recent penetration tests you have conducted—and, if possible, share a redacted sample report so I can see the depth of your work.