Comprehensive Web & Network Pentest

I need a thorough penetration test that covers both my public-facing web application and the underlying network so I can gauge our overall security posture before the next audit cycle. The engagement should simulate real-world attack paths, document every exploitable weakness, and prioritise fixes.

Please only respond if you personally hold an industry-recognised certification such as OSCP, CISSP, CEH or equivalent; I will ask for proof before kickoff.

Key deliverables I expect:
• Pre-engagement scope confirmation and test plan
• Exploitation phase with detailed evidence (screenshots, payloads, logs)
• Clear, well-structured report containing: executive summary for management, technical findings with CVSS scores, and actionable remediation steps
• Optional retest session to verify applied fixes

You may use the tooling you are most comfortable with—Burp Suite, Nmap, Metasploit, custom scripts, etc.—as long as the methodology aligns with OWASP and NIST frameworks.

If this sounds like a fit, briefly outline your recent web and network pentest experience and confirm availability for the engagement window.