Pentesing a web server

I am looking to hire someone to perform a web server penetration test. The purpose of this test is to identify any vulnerabilities in the system. The tester will only have access to public-facing aspects of the server and will be expected to complete the tests within two weeks.