Black-Box SaaS Pen Test -- 2

I need an experienced security professional to run a true black-box penetration test against my cloud-based B2B SaaS platform. You will be working strictly from the outside, over the public Internet, with no pre-supplied credentials or whitelisting.

Scope
The assessment must cover all public subdomains, login pages, APIs, and third-party sign-in pages. Your main focus is finding serious weaknesses that could expose data or allow account access. Standard vulnerability scans are welcome, but I am looking for manual verification and creative exploitation techniques that go beyond automated findings.

Depth of testing
Full proof is required: once you identify a critical path, demonstrate exploitability by using test accounts or test data (never live customer information). Proof-of-concept screenshots, request/response payloads, or short demo videos are acceptable as evidence.

Deliverables
• Executive-level summary of overall risk posture
• Detailed technical report for each finding, including reproduction steps, impact analysis, and remediation guidance
• Proof-of-concept artifacts for critical and high-severity issues
• Final retest summary after fixes, if time allows

All testing must respect relevant laws and our terms of service.