Full SaaS Security Assessment

We are looking for an experienced cybersecurity expert to perform a comprehensive security assessment of our Python-based web application and infrastructure.


Project Scope
- Conduct a complete security audit of our application.
- Identify vulnerabilities in the web application, APIs, database, and server.
- Perform penetration testing and vulnerability assessment.
- Review the application against the OWASP Top 10.
- Analyze authentication, authorisation, session management, and input validation.
- Review API security and identify potential attack vectors.
- Assess SQL injection, XSS, CSRF, SSRF, IDOR, file upload, and other common vulnerabilities.
-Review Linux server configuration and security hardening.
- Assess cloud security configuration (if applicable).
- Review source code for secure coding practices.
- Investigate any suspicious activity or security incidents if discovered.
- Provide a detailed report of findings, risk levels, proof of concept (where applicable), and recommended fixes.
- Work with our development team to validate and verify remediation.