CERT-In Audit for Web Apps from India with certificate.

I need a CERT-In-empanelled information security auditing organisation to carry out a full Vulnerability Assessment, Penetration Testing, and compliance audit on one of our customer-facing web applications WITH CERTIFICATE. The application is live, and processes personal data of Indian residents, so every test and report must align with CERT-In guidelines as well as the latest OWASP Top 10.

Scope of work
• Map the entire attack surface of the site, including APIs and third-party integrations, then perform an exhaustive VA/PT cycle.
• Document every finding with evidence, severity rating, and clear remediation steps; re-test once fixes are applied and confirm closure.
• Produce a final compliance report that I can submit directly to stakeholders and regulators; it must carry your organisation’s empanelment reference.

I’m still deciding whether ongoing monitoring is necessary, so please outline options for continuous scanning or managed SOC if you offer them.

Provide an estimated timeline and the specific tools or frameworks you typically use (Burp Suite, Nessus, Kali, etc.) so I can coordinate downtime if required. The engagement starts as soon as we sign an NDA, and payment will be released in two milestones—draft report and final sign-off.