Joomla Manual Security Audit

I need a recurring security routine that relies on hands-on, line-by-line inspection rather than automated scans. The goal is to uncover any hidden vulnerabilities, coding flaws, or insecure configurations before they become a problem.
Scope of the review covers core Joomla files, every installed extension or plugin, and my custom templates, so you’ll be digging into PHP, JavaScript, and configuration files alike while keeping an eye on Joomla best-practice guidelines and OWASP principles.

Please deliver:

• A detailed audit report for each run, listing every issue you find in the core, extensions/plugins, and custom templates.
• Clear, prioritized remediation steps or patches I can apply immediately.
• A brief summary that highlights high-risk items and any recurring patterns so future sprints stay focused.

All work happens on a staging copy I’ll provide. SSH and backend access are ready; I simply need your expertise to ensure the site stays hardened release after release.