Independent Penetration Test – Windows Java Client/Server Desktop Application

We are looking for an experienced and independent penetration tester / cybersecurity company to perform a professional penetration test of a Windows-based Java client/server desktop application.
The system consists of one SERVER application and one CLIENT application communicating over a private LAN. Testing will be performed in an isolated test environment using installation packages supplied by us after NDA signature.
This must be a genuine manual application penetration test, not simply an automated vulnerability scan.
The project must include a formal penetration-test report with severity-rated findings and remediation recommendations, followed by one retest after remediation and a final closure/retest report. An attestation/closure letter is preferred.
Experience with Windows/Java thick-client applications is required. Preference will be given to applicants with recognized qualifications such as OSCP, OSWE, OSEP, CREST CRT/CCT or equivalent, or CREST-accredited penetration-testing companies.
IMPORTANT: Please read the attached detailed Project Scope completely BEFORE submitting your bid.
In your bid, please confirm:
- Fixed price and estimated duration
- Relevant certifications
- Java/Windows thick-client penetration-testing experience
- Manual testing is included
- One remediation retest is included
- NDA can be signed
- Final professional report and closure/retest report are included