Android App Penetration Test

I need a seasoned ethical hacker to run a full-scope penetration test against my production Android application. The goal is to simulate a real-world attack and expose any weakness an aggressive adversary could exploit—from insecure storage and IPC abuse to dynamic analysis bypasses and backend API flaws.

You will receive the signed APK, a brief architecture overview, and temporary credentials for test accounts. Feel free to bring whatever toolkit you prefer; in past engagements Burp Suite, OWASP ZAP, Drozer, Frida, and the Android SDK have yielded solid coverage, but your own proven workflow is welcome.

Deliverables must include:
• An executive summary outlining overall risk and priority findings
• A detailed technical report listing each vulnerability, reproduction steps, affected components, and clear remediation guidance
• Proof-of-concept screenshots or videos for all critical and high findings
• A short debrief call to walk me through the results and answer questions

I expect all testing to stay within the mobile app’s scope, respect user data, and comply with our NDA, which I’ll share on award. Let me know your estimated timeline, any certification you hold (e.g., OSCP, CEH, GPEN), and a brief note on similar Android work you’ve completed.