Web App Security Assessment
Budget: ₹12,500 – ₹37,500 INR
I need a thorough, methodical security assessment of my production-ready web application. The goal is to expose any weaknesses before launch, demonstrate real-world exploitability, and give me a clear, prioritized plan for remediation.
Scope
• Full application security testing: authentication, authorization logic, input validation, business-logic flows, session management, server configuration, and third-party integrations.
• Black-box techniques are fine, but I can supply test credentials for deeper analysis if that helps you reach code paths hidden behind login.
• Industry-standard tooling such as Burp Suite, OWASP ZAP, Nikto, or your preferred commercial scanner is expected, followed by manual verification so I’m not just getting automated false positives.
Deliverables (acceptance criteria)
1. A concise executive summary highlighting critical findings in plain language.
2. A detailed, vulnerability-by-vulnerability report: description, proof-of-concept or screenshot, affected endpoint/parameter, severity rating, and recommended fix.
3. A retest after I patch the issues to confirm closure.
Timeframe
The first pass of the assessment and the written report should land within one week of project start; the optional retest can follow once my team deploys fixes.
If this fits with your expertise in web application security testing, let’s get started.
Scope
• Full application security testing: authentication, authorization logic, input validation, business-logic flows, session management, server configuration, and third-party integrations.
• Black-box techniques are fine, but I can supply test credentials for deeper analysis if that helps you reach code paths hidden behind login.
• Industry-standard tooling such as Burp Suite, OWASP ZAP, Nikto, or your preferred commercial scanner is expected, followed by manual verification so I’m not just getting automated false positives.
Deliverables (acceptance criteria)
1. A concise executive summary highlighting critical findings in plain language.
2. A detailed, vulnerability-by-vulnerability report: description, proof-of-concept or screenshot, affected endpoint/parameter, severity rating, and recommended fix.
3. A retest after I patch the issues to confirm closure.
Timeframe
The first pass of the assessment and the written report should land within one week of project start; the optional retest can follow once my team deploys fixes.
If this fits with your expertise in web application security testing, let’s get started.