Penetration testing before site launch -- 2

I have a Wordpress web site with custom plugin. You can access it directly or via an Android app and a Ios app.
Both app open an embedded browser and shows some pages of the site with a mobile css.
I need to do a professional penetration testing with more than one software suite and receive a report of how to close security holes.