We recently had our website scanned for vulnerabilities in it's code. We discovered 479 high alerts, 12 medium alerts and 85 low alerts. Our script had alerts for possibly being vulnerable to Cross Site Scripting (XSS) attacks, SQL Injection attacks, directory traversal attacks and SQL/XPath Injection attacks amongst the lists of high alert items. I will provide the full scan report upon request. Our website is at [url removed, login to view]
We seek an experienced company in this area that can supply proof of previous work done. Before selecting a provider, we will need a signed NDA. After receiving signed NDA we will provide the source code book and database.
Please provide details specific to performing this task.
We will pay 50% at start of the project and the remainder after completion of project. Another scan will be performed to ensure all bugs have been fixed before final payment will be made.
The provider we select will also receive preference for our main project, which is already listed here on getafreelancer titled Website Completion project number 144208. This will consist of adding features to our current website.