Public Web App Security Audit

I need a trained web-security professional to examine my public-facing website and highlight any common weaknesses before they can be exploited. The scope is strictly the areas that are publicly accessible—no authenticated sections, portals, or payment flows—so the engagement should be quick, targeted, and non-intrusive.

Your assessment should combine automated scanning (e.g., OWASP ZAP, Burp Suite Community or similar) with manual verification so that false positives are weeded out and any missed issues are uncovered. Please respect production-safe practices at all times: no destructive attacks, no denial-of-service techniques, and no data tampering.

Deliverables
• A concise report that lists each vulnerability, its risk rating, reproducible PoC steps (screenshots or video welcome), and clear remediation advice.
• A summary spreadsheet or table that maps findings to the OWASP Top 10 categories for quick reference.
• A brief follow-up call or chat to walk me through the results and answer questions.

I will provide the live URL and any technical constraints once we start. Ideally, you can finish testing and deliver the report within one week.