Mobile App Pen-Test Needed
Budget / Salary₹12,500–37,500
TypeFreelance project
LocationRemote
Posted1 hour ago
I need a thorough, white-hat penetration test carried out on my mobile application, which is live on both iOS and Android. The goal is to uncover any exploitable weaknesses before they become a real-world problem and to give my dev team clear, actionable fixes.
Scope
• End-to-end testing that covers the client apps, API calls, authentication flows, local data storage, and any third-party libraries we rely on.
• Use of industry-standard mobile security methodologies such as the OWASP Mobile Security Testing Guide.
• Dynamic and static analysis with tools like Burp Suite, Frida, MobSF, or whatever you normally rely on for deep mobile assessments.
Deliverables
1. A concise executive summary highlighting overall risk.
2. A detailed technical report listing each vulnerability with proof-of-concept steps, severity rating, and recommended remediation.
3. A retest (once fixes are in place) to confirm that critical issues have been properly closed.
Acceptance Criteria
• Every finding must be reproducible from the steps you document.
• No data from the test may be retained once the engagement ends.
• Reports must be delivered in both PDF and an editable format.
You’ll have direct access to our staging builds, test credentials, and any backend documentation you need. Let me know your estimated timeline for the initial test and follow-up retest so we can lock in the schedule.
Scope
• End-to-end testing that covers the client apps, API calls, authentication flows, local data storage, and any third-party libraries we rely on.
• Use of industry-standard mobile security methodologies such as the OWASP Mobile Security Testing Guide.
• Dynamic and static analysis with tools like Burp Suite, Frida, MobSF, or whatever you normally rely on for deep mobile assessments.
Deliverables
1. A concise executive summary highlighting overall risk.
2. A detailed technical report listing each vulnerability with proof-of-concept steps, severity rating, and recommended remediation.
3. A retest (once fixes are in place) to confirm that critical issues have been properly closed.
Acceptance Criteria
• Every finding must be reproducible from the steps you document.
• No data from the test may be retained once the engagement ends.
• Reports must be delivered in both PDF and an editable format.
You’ll have direct access to our staging builds, test credentials, and any backend documentation you need. Let me know your estimated timeline for the initial test and follow-up retest so we can lock in the schedule.
Apply on Freelancer →
Project sourced from Freelancer.com. Applications happen directly on the original platform — we never collect your data.