CREST-Certified VAPT for Web & Network

I need a CREST-certified professional to carry out a full-scale security review that covers both a vulnerability assessment and a penetration test. The scope spans our public-facing web applications and the core network infrastructure that supports them.

The engagement should mirror real-world attack paths: enumerate, exploit, and then verify impact without disrupting production. Tooling is at your discretion—Burp Suite, OWASP ZAP, Nmap, Nessus, Metasploit, or any equivalent platform you prefer—so long as the final evidence is reproducible and mapped to CVSS scoring.

Deliverables
• Executive summary written in plain language for leadership
• Technical report detailing every finding, proof-of-concept steps, screenshots or packet captures, and CVSS scores
• Prioritised remediation roadmap with quick wins and longer-term fixes
• Closing call or recorded walkthrough to clarify results and next actions

All testing must comply with CREST methodology and ethical guidelines. I can provide a letter of authorisation and any necessary whitelisting once dates are agreed. Please outline your estimated timeline, any pre-engagement information you require, and how you prefer to coordinate live testing windows.