
Fechado
Publicado
Pago na entrega
We are looking for an experienced penetration tester / cybersecurity consultant to design a professional penetration testing report template that can be reused for multiple clients and engagements. The objective is to create a clean, structured, and industry-standard report template that can be used for Web, API, Mobile, and Infrastructure penetration testing engagements. The template should be suitable for enterprise and government-level clients. This is NOT a penetration test. This project is strictly for report template design. Scope of Work The freelancer will be responsible for creating a complete penetration testing report template, including but not limited to: 1️ Cover & Metadata Report title Client name Engagement type Application / Asset name Test date & report version Confidentiality statement 2️ Executive Summary (Management Friendly) High-level risk overview Overall security posture Key findings summary Business impact explanation (non-technical language) Risk rating overview (Critical / High / Medium / Low) 3️ Engagement Overview Scope of testing In-scope and out-of-scope assets Testing type (Black / Grey / White box) Testing timeline Testing limitations & assumptions 4️ Methodology Testing standards followed (OWASP, PTES, NIST, etc.) Web / API / Mobile / Infrastructure methodology sections Authentication & authorization testing Business logic testing Rate limiting & abuse testing 5️ Risk Rating & Severity Model Clear explanation of severity levels Likelihood vs impact model CVSS scoring (optional but preferred) 6️ Detailed Vulnerability Findings Section Each finding template must include: Vulnerability title Severity Affected asset(s) Description Business impact Technical impact Proof of Concept (PoC) section Screenshots / evidence placeholder Step-by-step reproduction steps Remediation recommendation References (OWASP, CWE, CVE where applicable) 7️ Observations & Best Practices Security improvement recommendations Hardening suggestions Defense-in-depth recommendations 8️ Conclusion Overall risk assessment Security maturity summary Final recommendations Appendix Tools used Test user accounts (placeholder) Glossary of terms Risk rating explanation Deliverables Editable Word (.docx) report template Optional PDF sample output Fully reusable and customizable Clean formatting and professional layout No client-specific data included Required Skills & Experience Proven experience in penetration testing Strong understanding of OWASP Top 10, PTES, NIST Prior experience creating pentest reports Ability to write clear executive-level content Experience working with enterprise or government clients (preferred) Nice to Have Multiple template variants (Web / API / Mobile) CVSS scoring integration Risk matrix visuals Compliance-friendly structure Timeline Expected delivery: 3–7 days Revisions: At least 2 revision cycles Confidentiality The freelancer must agree that: The template will be exclusive to the buyer No reuse or resale of the template is allowed
ID do Projeto: 40149394
18 propostas
Projeto remoto
Ativo há 18 dias
Defina seu orçamento e seu prazo
Seja pago pelo seu trabalho
Descreva sua proposta
É grátis para se inscrever e fazer ofertas em trabalhos