External Black-Box Penetration Test

I need an external, black-box penetration test carried out against three separate /24 IPv4 ranges that power our public-facing web applications, email servers, and SIP services. The exercise must satisfy our compliance requirements, so the methodology, evidence gathering, and final reporting all have to stand up to an audit review.

Here’s what I expect:
• Reconnaissance, vulnerability discovery, and controlled exploitation performed strictly from an external perspective—no inside credentials will be provided.
• Clear scoping and scheduling so the assessment covers every live host across the three networks without disrupting production traffic.
• A written report that prioritises findings by risk, maps them to relevant compliance controls, and includes reproducible proof-of-concept details plus remediation guidance.
• A high-level executive summary and a separate technical appendix I can hand straight to auditors.

Please outline your testing methodology, the tools you typically rely on (e.g., Nmap, Nessus, Burp Suite, Metasploit, SIP-specific testing utilities), and the estimated timeline to complete the engagement and deliver the final report.

Pen Test Certification is also required.