I will vulnerability and penetration test your web application

I use safe, controlled methods only, no destructive actions like data deletion or DoS-style attacks. For high-traffic or sensitive sites, I recommend testing a staging copy first, which we can arrange during scoping.

Not for a black-box test. For a more thorough grey-box test (recommended), I'll need a limited test account to check issues only a logged-in user could find, like broken access control. We'll agree on this during scoping.

Yes. Before I start, you'll confirm in writing that you own the target or have permission to test it. This protects us both and is standard practice in professional penetration testing.

A detailed report: every vulnerability found, its severity (Critical/High/Medium/Low), proof-of-concept, and clear, plain-English steps to fix it. What your team needs to act on, not filler.

My core service is testing, reporting, and remediation guidance. I don't patch code myself, but the report is written so your developers can act on it directly, and I'm available for follow-up questions after delivery

Yes. I'm happy to sign an NDA before we start if you'd like one. Your report and any access you provide are never shared or reused for any other purpose.