VAPT Testing – Web Application & API

Looking for a certified and experienced cybersecurity professional or security testing company to conduct VAPT (Vulnerability Assessment and Penetration Testing) for a web application and its APIs.

Only applicants with proven VAPT experience and relevant cybersecurity certifications will be considered.

Scope
Web Application VAPT
REST API VAPT
WebSocket API VAPT
Grey-box testing
Multiple user roles
Approximately 20 API endpoints

Requirements
Proven experience conducting professional VAPT for web applications and APIs
Relevant industry-recognized cybersecurity certifications
Strong knowledge of OWASP and modern web/API security
Ability to provide a professional, detailed VAPT report
Previous VAPT experience and sample/redacted reports preferred

Deliverables
Comprehensive VAPT report
Vulnerability severity/risk ratings
Evidence and reproduction details
Remediation recommendations
Executive summary
VAPT certificate/attestation, if available
Retesting after remediation, if included

Please include your relevant certifications, VAPT experience, sample/redacted report, timeline, and fixed-price quote with your proposal.

Preference will be given to certified professionals/companies with a strong track record in web application and API penetration testing.