Ethical Web App Pen-Test

I need a skilled ethical hacker to carry out a focused penetration test on my production web application. The goal is to uncover any exploitable weaknesses before they become a problem, with particular attention to:

• Data validation
• Session management

Once we sign an NDA I’ll share architecture notes, limited credentials, and a staging URL. Please stay within scope, avoid destructive techniques, and document every step so I can reproduce the findings.

Deliverables I expect
– A concise executive summary of overall risk
– Detailed, step-by-step proof-of-concept for each issue discovered
– Practical remediation advice ranked by priority
– A retest summary after fixes (short verification pass)

Tools such as Burp Suite, OWASP ZAP, or your own preferred stack are fine, but I value solid manual testing for logic flaws just as much. Let me know your methodology, estimated timeline, and any certifications or past project links that prove you can do the job responsibly.