Web App Pentest (Graybox) + Stress Testing + Re-Test - PHP/Laravel

Web Application Penetration Test (Graybox) + Stress/Load Testing + Re-Test. Reports must be delivered in SPANISH.

1) SECURITY PENETRATION TEST - Graybox (authenticated, valid credentials provided)
- User roles: 2 (Administrator and low-privilege user, RBAC architecture)
- Modules: 9
- Forms: 124
- Input fields: 932
- Write web routes: 211 / 348 total
- Endpoints: 64
- Technology: PHP 8.2, Laravel 10, MySQL, Bootstrap 5.2
Deliverable: report with executive and technical summary, including evidence and recommendations (OWASP-based methodology).

2) STRESS AND CONCURRENCY TESTING
- Reference scenario: 320 simultaneous users
- Flows/endpoints to evaluate: up to 2 (e.g. Login and information query)
Deliverable: results report and general recommendations.

3) RE-TEST (Graybox) after remediation of findings
- 1 re-test of the findings reported in the pentest
- 7 business days, on request, within 90 days after delivery of the final pentest report. The client will confirm which vulnerabilities were remediated.
Deliverable: results summary template and executive/technical report.

TIMELINE: Pentest + stress testing in 20 business days.

REQUIREMENTS:
- Proven experience in web application pentesting (please share sample/redacted reports)
- Certifications preferred: Ethical Hacker (CEH/OSCP/eJPT or similar), CompTIA Security+
- Fluent Spanish for reports
- Signed NDA / confidentiality of all information

Please include in your bid: total price broken down by service (pentest, stress test, re-test), tools and methodology, and your certifications.