Website Penetration Testing Audit

I want a genuine cybersecurity professional to probe my live website / web application exactly as an attacker would, so we can uncover and fix every weakness before anyone malicious finds it first. The assignment is strictly a “find security weaknesses before attackers do” engagement, not an incident response.

Your task is to run a full-scope penetration test—both automated and manual—covering the entire public-facing surface, underlying APIs, authentication flows and common OWASP Top 10 vectors. Burp Suite, OWASP ZAP, Nikto, Nessus, Metasploit or any comparable tools are welcome, but I expect clear, human-written analysis rather than raw scan dumps.

Deliverables
• A concise pre-engagement plan outlining methodology and timeline
• The live test itself, performed without disrupting normal site availability
• A structured PDF report that ranks issues (CVSS or similar), includes proof-of-concept screenshots or payloads, and gives practical remediation guidance
• A short follow-up call or written summary to walk me through the findings
• One free retest after fixes are applied

Acceptance criteria
1. All critical and high-risk vulnerabilities are reproducible from your report.
2. No unplanned downtime or data loss occurs during testing.
3. Final report is delivered within the mutually agreed deadline.

If this scope matches your expertise, let’s secure the site before anyone else tries to break in.