CERT-In Audit for Web Apps from India with certificate.

@sahilcomputers39

Hi, Get your live application VAPT-ready for CERT-In submission with a certified, regulator-ready security report. Since the application is live and handles Indian residents’ personal data, I understand the need for a controlled assessment aligned with CERT-In requirements and the latest OWASP Top 10. I can cover the full attack surface, including web application endpoints, APIs, authentication, authorization, and relevant third-party integrations. My approach includes:- - Full VA/PT using Burp Suite, Nessus, Nmap, Kali Linux, and OWASP-aligned testing techniques. - Evidence-backed findings with severity, business impact, and practical remediation steps. - Re-testing after remediation with closure confirmation. - Final stakeholder/regulator-ready report with the required certificate and organisation empanelment reference. I can also outline options for continuous vulnerability scanning and managed SOC monitoring if ongoing security coverage is required. The assessment can begin after NDA execution, with reporting structured around your two milestones: draft report and final sign-off. Best Regards Sahil D.

@Aqsa4400

Hello, I have thoroughly reviewed your project requirements for a CERT-In Audit for your customer-facing web application in India. I understand the need for a comprehensive Vulnerability Assessment, Penetration Testing, and compliance audit aligned with CERT-In guidelines and OWASP Top 10 standards. With 5 years of experience in Website Testing and Web Security, I assure you of a professional and thorough audit. To view examples of my previous work, please visit my portfolio: https://www.freelancer.pk/u/Aqsa4400 I would be delighted to discuss your project in more detail. Please initiate a chat so we can explore the specifics further. Best regards, Aqsa Usman

@morne01

?IF YOU'RE NOT HAPPY, YOU DON'T PAY.? Recently, we assisted a client in enhancing their web application's security and compliance, ensuring it met all necessary standards without overwhelming them in the process. We will help you achieve a thorough vulnerability assessment and penetration testing that aligns with CERT-In guidelines and the latest OWASP Top 10. I noticed you require a clean and professional compliance report that documents every finding clearly, along with remediation steps and severity ratings. I have extensive experience in security audits and compliance assessments outside of Freelancer, but I am new to Freelancer. My expertise includes using tools like Burp Suite and Nessus, ensuring a thorough evaluation of your application. I look forward to helping you secure your application effectively. Regards, MORNE.

@Chirag3147

As a full stack developer with an extensive background in internet security, testing and QA, I'm uniquely equipped to handle the stringent requirements of this project. Having hands-on experience in developing scalable web applications and AI automation systems for over 4 years, I have an in-depth understanding of how data is processed and the associated vulnerabilities that can arise, particularly when it comes to web applications hosting personal data. Additionally, my skills extend beyond just auditing to ongoing monitoring and security optimization. I can help you decide on the need for continuous scanning or managed SOC, providing a holistic approach to security management. My previous experience working with SaaS products enables me to provide you with a final report carrying detailed findings, supporting evidence, severity rating, as well as clear remediation steps in compliance with CERT-In standards. Notably, my ability to connect fragmented tools and systems into unified platforms was developed during my time building scalable backend architectures – a skill invaluable in performing third-party integrations underpinning your web application. If you’re looking not just for thoroughness but also long-term solutions, let’s discuss how my skills and experience can help fortify your customer-facing web application against potential threats. (Please note: Final pitch is 601 characters)

@ThamerBaccouch

The empanelment reference on your final report is the one thing I can't give you: I'm an independent engineer, not a CERT-In empanelled organisation, so the certificate itself has to come from a firm that is. What I can do is the technical work underneath it. I'd map the attack surface, APIs and third-party integrations included, test it against the OWASP Top 10, write each finding up with evidence, a CVSS score and a concrete fix, then retest once you've patched and confirm closure. The empanelled auditor then gets a remediated application to certify. That's backed by eight years of software engineering with web application penetration testing and security audits as part of it, including a role analyzing vulnerabilities in widely used open source Python packages, so I cover the code side as well as the black-box side. Do you already have an empanelled firm lined up for the certificate, or do you want the technical audit done first so their scope is smaller? Thamer

@UzairPatell

We have the complete skill set this project calls for and are ready to start. Our expertise lies in conducting thorough security audits that ensure compliance and safeguard sensitive data. We specialize in Vulnerability Assessment and Penetration Testing aligned with CERT-In guidelines and the OWASP Top 10. We noted your requirement for a final compliance report with our empanelment reference. Our typical tools include Burp Suite and Nessus, and we can accommodate your timeline for coordination. Could you clarify if there are specific APIs or integrations that require particular attention? We’re available to discuss specifics whenever it suits you, and even if it doesn’t end up being us, you’ll gain solid direction. Regards, Uzair.

@eugabrielmaximo

Hello, Your requirement for a CERT-In-empanelled VA/PT and compliance audit is clear, especially the need for a report that can be submitted to stakeholders/regulators and includes the organisation’s empanelment reference. The key challenge is not just finding vulnerabilities, but producing defensible evidence, severity ratings, remediation guidance, and re-test closure across the full web application, APIs, and third-party integrations while keeping the live environment safe. For this engagement, I would structure the assessment around • Full attack surface and API discovery • Manual automated VA/PT aligned with the latest OWASP Top 10 and relevant CERT-In requirements • Evidence backed findings with risk/severity and remediation guidance • Controlled validation of fixes and final closure report • Compliance-focused documentation suitable for stakeholder/regulatory review Typical tooling can include Burp Suite, Nessus, Nmap, Kali Linux and API/security testing tools, with testing intensity coordinated around your production constraints. I can also outline continuous vulnerability scanning and managed SOC options separately if required. Before starting, I’d confirm the application scope, API inventory, authentication flows, production testing restrictions, and the exact CERT-In empanelment/certificate requirement. What is the approximate number of domains, APIs, and authenticated user roles in scope?