I will do web application penetration testing and reporting

The best defence is a good offence. 

*Do not place the order before discussing the rules of engagement, timeline, budget and scope.*

With their growing complexity and demand, web applications have become the target of choice for hackers. Application security issues are not only the most common type of vulnerability but also growing in complexity. 

What I will provide (Varies with the package):

• Automated and manual vulnerability scanning and reporting.
• The testing will be based on the NIST SP 800-115 Technical Guide to Information Security Testing and Assessment, OWASP Testing Guide (v4.2), and customized testing frameworks. 
• I will perform manual assessments beyond basic automated tests to identify real attack vectors that can be used against your application. 

What the report will contain (Varies with the package):

• Non-technical section with a summary of each finding.
• The technical section includes the severity rating, PoC, and recommendations on how to fix the vulnerability.

I have found vulnerabilities on corporate and government websites such as TripAdvisor and the US Department of Defense and reported vulnerabilities on 200+ websites.