Web Application Penetration Testing Project

I’m looking for a seasoned cybersecurity professional who can carry out a full-scale penetration test against my public-facing web application. My priority is threat assessment and mitigation, so the exercise must simulate real-world attack scenarios, uncover exploitable weaknesses, and give me a clear path to harden the platform. Scope You will conduct a comprehensive, OWASP-aligned assessment that includes manual exploitation techniques in addition to automated scans. I expect you to explore authentication, authorization, session management, input validation, business logic, and any server-side misconfigurations. Google platform for email/domain management and primarily cloud based tools. Tool choice is up to you—Burp Suite, OWASP ZAP, Kali Linux utilities, Metasploit, or comparable frameworks—as long as the methodology remains repeatable and well documented. Deliverables [login to view URL] networks for security breaches [login to view URL] vulnerabilities in systems [login to view URL] penetration testing to simulate attacks [login to view URL] security measures to prevent cyber threats [login to view URL] security incidents [login to view URL] threat intelligence [login to view URL] on potential risks to protect an organization's data and systems. For example, Identity and access management for google and domain platforms 8. Provide solutions to prevent cyberattacks and stop cyber attacks. Acceptance criteria The engagement is complete when the final report is delivered, every critical or high vulnerability has a validated mitigation recommendation. If you’ve led similar web application tests, can explain your process clearly, and can start soon, let’s talk.

Project ID: 40302223