Urgent Web Security Test Automation

I have a small web-based application that needs its security posture checked right away. The goal is to build an automated suite that performs penetration-style tests each time the app is deployed, flagging anything that could be exploited before it reaches production.

Scope
– The work is limited to security testing; I do not need functional or performance checks at this stage.
– Within security, the emphasis is on penetration testing methods: automated discovery of common weaknesses (SQLi, XSS, auth bypass, misconfigurations) and clear proof-of-concept steps.

Tech expectations
Python with Selenium, Playwright, or a comparable headless browser tool is fine, and I’m open to OWASP ZAP or similar APIs if that speeds things up. Please wire the tests so they can be triggered from a simple CLI command and return actionable output (JSON or concise console log).

Deliverables
• Well-commented test scripts that I can run locally or in CI
• A short README explaining setup, run command, and how to extend the suite
• A brief findings report generated by the script on first execution

Acceptance criteria
The suite must complete a full run against my staging URL in under 15 minutes, exit with a non-zero code when a vulnerability is detected, and clean up any test data it creates.

Timeline
I need the first workable version within 48 hours so I can integrate it into our pipeline.