Targeted Pen-Test Engagement
Budget: $30 – $250 CAD
I need a thorough, white-hat penetration test carried out against a defined set of assets that I will share once an NDA is in place. The objective is to uncover real-world attack paths, validate any discovered vulnerabilities, and provide clear remediation guidance so we can tighten our overall security posture.
Because this is a focused engagement rather than a blanket vulnerability assessment or high-level audit, I expect you to emulate genuine threat scenarios. Feel free to leverage industry-standard tooling such as Burp Suite, Nmap, Metasploit, or your own custom scripts, as long as every step remains within our agreed scope and is fully documented.
Deliverables I need at the end of the engagement:
• Executive summary written in plain language for leadership
• Detailed technical report mapping each finding to CVSS where relevant, including reproduction steps, screenshots, and recommended fixes
• Proof-of-concept exploit code or packet captures for critical issues
• A short debrief meeting (live call or recorded video) to walk through the results and answer questions
Acceptance criteria: all findings must be reproducible on the specified targets, carry clear evidence, and include actionable remediation steps. Once fixes are applied, I may ask for a brief retest to confirm closure.
If you have recent, demonstrable experience conducting similar targeted pen-tests and can start soon, let’s talk.
Because this is a focused engagement rather than a blanket vulnerability assessment or high-level audit, I expect you to emulate genuine threat scenarios. Feel free to leverage industry-standard tooling such as Burp Suite, Nmap, Metasploit, or your own custom scripts, as long as every step remains within our agreed scope and is fully documented.
Deliverables I need at the end of the engagement:
• Executive summary written in plain language for leadership
• Detailed technical report mapping each finding to CVSS where relevant, including reproduction steps, screenshots, and recommended fixes
• Proof-of-concept exploit code or packet captures for critical issues
• A short debrief meeting (live call or recorded video) to walk through the results and answer questions
Acceptance criteria: all findings must be reproducible on the specified targets, carry clear evidence, and include actionable remediation steps. Once fixes are applied, I may ask for a brief retest to confirm closure.
If you have recent, demonstrable experience conducting similar targeted pen-tests and can start soon, let’s talk.