Web App Penetration Testing Needed

I need a methodical penetration test of my public-facing web application. Your engagement should be hands-on: actively probe the site, enumerate attack vectors and exploit them where possible. I am particularly interested in anything you can surface through Metasploit modules, so feel free to lean on that framework alongside tools such as Burp Suite, Nmap, or OWASP ZAP if they help deepen coverage.

Scope
• Black-box testing of the full web stack (no mobile or internal network assessment).
• Focus on discovering and exploiting vulnerabilities that matter in the real world, not just automated scanner noise.

Deliverable
A detailed report that lists each confirmed vulnerability, its risk rating, reproducible proof-of-concept evidence (screenshots, request/response pairs, payloads), and concise remediation guidance. Organise findings by severity so my dev team can triage quickly.

Please work ethically, respect the application’s data, and document every step so I can reproduce your results. Let me know your estimated timeline and any information you’ll require before kicking off.