SaaS VAPT Compliance Certification
Budget / Salary₹1,500–12,500
TypeFreelance project
LocationRemote
Posted7 hours ago
I need a seasoned VAPT professional to conduct a full-scope penetration test on my production web-based SaaS platform and issue an official compliance certificate—all within 7 calendar days from project kick-off.
Scope of work
• Perform an external, black-box web application penetration test that fully covers the OWASP Top 10 and any SaaS-specific attack vectors.
• Use widely accepted tooling (e.g., Burp Suite, OWASP ZAP, Nmap, metasploit) and clearly reference methodology in the final report.
• Supply a concise executive summary for leadership, a detailed technical report with proof-of-concept exploits, CVSS risk ratings, and actionable remediation guidance.
• Issue a signed compliance certificate attesting that the application was tested and found to be free of critical or high-risk vulnerabilities as of the report date.
Acceptance criteria
1. All test activities conclude and the full documentation—including the compliance certificate—reaches me no later than Day 7.
2. Reports are reproducible: any finding must be verifiable on request.
3. Confidential data gathered during testing is securely deleted and not disclosed.
4. One complimentary retest of patched items is included if initiated within 30 days.
Environment access and scheduling details will be provided immediately after contract award so you can start without delay.
Scope of work
• Perform an external, black-box web application penetration test that fully covers the OWASP Top 10 and any SaaS-specific attack vectors.
• Use widely accepted tooling (e.g., Burp Suite, OWASP ZAP, Nmap, metasploit) and clearly reference methodology in the final report.
• Supply a concise executive summary for leadership, a detailed technical report with proof-of-concept exploits, CVSS risk ratings, and actionable remediation guidance.
• Issue a signed compliance certificate attesting that the application was tested and found to be free of critical or high-risk vulnerabilities as of the report date.
Acceptance criteria
1. All test activities conclude and the full documentation—including the compliance certificate—reaches me no later than Day 7.
2. Reports are reproducible: any finding must be verifiable on request.
3. Confidential data gathered during testing is securely deleted and not disclosed.
4. One complimentary retest of patched items is included if initiated within 30 days.
Environment access and scheduling details will be provided immediately after contract award so you can start without delay.
Apply on Freelancer →
Project sourced from Freelancer.com. Applications happen directly on the original platform — we never collect your data.