Full Website Quality & Security Audit

I run an online store that processes payments directly on-site and I’d like a fresh, expert set of eyes on every corner of it. I’m concerned not only about obvious vulnerabilities—SQL injection, XSS, CSRF, weak session handling—but also about speed hiccups, broken links, and anything that might frustrate shoppers or damage conversions.

Your review must cover every page, including the private admin dashboard after login. That means probing checkout workflows, user-account areas, and any hidden endpoints for potential exploits while also noting UX friction, HTML/CSS issues, and performance bottlenecks. Automated scanners (OWASP ZAP, Burp Suite, Lighthouse) are welcome, but I’m counting on manual verification and clear, reproducible evidence.

Deliverables I expect:
• A concise report detailing each vulnerability or quality defect, its severity or business impact, and recommended fixes.
• Screenshots or request logs that prove any security finding.
• A short executive summary I can hand to my dev team and non-technical stakeholders.

All testing must remain non-destructive—no data loss, no service interruption. Let me know your proposed timeline and the testing methodology you’ll follow so I can grant temporary admin credentials and staging access.