Black-Box SaaS Pen Test -- 3

I need an experienced security professional to run a true black-box penetration test against my cloud-based B2B SaaS platform. You will be working strictly from the outside, over the public Internet, with absolutely no pre-supplied credentials, test accounts, or whitelisting.

Scope
The assessment must cover all public subdomains, login pages, APIs, and public endpoints. Your main focus is finding serious weaknesses that could expose data or allow unauthorized account access, operating purely from an unauthenticated external attacker's perspective. Standard vulnerability scans are welcome, but I am looking for manual verification and creative exploitation techniques that go beyond automated findings.

Depth of testing
Full proof is required: once you identify a critical path or vulnerability, demonstrate exploitability safely using your own derived test payloads or methods (never live customer information). Proof-of-concept screenshots, request/response payloads, or short demo videos are acceptable as evidence.

Deliverables
- Executive-level summary of overall risk posture
- Detailed technical report for each finding, including reproduction steps, impact analysis, and remediation guidance
- Proof-of-concept artifacts for critical and high-severity issues
- Final retest summary after fixes, if time allows

All testing must respect relevant laws and our terms of service. If this sounds like the kind of engagement you excel at, let’s secure the platform together.

---
來源：Freelancer.com | 出價次數：10 | 剩餘時間：6 日 | 專案類型：固定預算