Certified SaaS Penetration Test Required [ONLY VERIFICATION AND CERTIFICATION]

We have completed a penetration test and remediated all findings. We need an
independent certified professional to verify the remediation and issue a
signed validation letter.

This is a VERIFICATION engagement, not a full penetration test. The scope is
small and well defined.

WHAT WE PROVIDE
- Our existing penetration test report with the full findings list
- Test accounts on an isolated environment
- Details of the remediation applied to each finding
- NDA for you to sign before we share any of the above

WHAT YOU DO
1. Review our existing report and the remediation we applied
2. Independently retest each finding to confirm it is closed (hands-on, your
own tooling, your own judgement)
3. Spot-check the most security-sensitive areas: authentication, access
control, and multi-tenant data isolation
4. Report honestly. If something is NOT actually fixed, we want to know — we
will fix it and you retest. We are not looking for a rubber stamp.

DELIVERABLE
A validation letter on your company letterhead, signed and dated, stating:
- What you tested and when
- Your methodology
- That you independently verified the remediation of each finding
- Any issues still outstanding, if any
- Your certification name and credential ID

TARGET
- Node.js / Fastify REST API and React web application
- Multi-tenant B2B SaaS, hosted on Azure
- Test environment provided; no production access needed

REQUIREMENTS
- Valid, verifiable certification (OSCP, CREST, GPEN, CEH or equivalent)
- You must provide your credential ID for verification
- Able to issue the letter on company letterhead with a signature
- Turnaround: 3 days or less from receiving access

TO BID, PLEASE ANSWER
1. Your certification and credential ID
2. A redacted sample of a validation or attestation letter you have issued
3. Your turnaround time from receiving access