Independent Security, Load Testing & Production Readiness Validation for SaaS Platform

We are seeking an experienced software quality, security, and reliability team to perform an independent production readiness validation of a cloud-based e-Invoicing and compliance platform. The platform is already developed, operational, and has undergone internal testing and hardening. We are not looking for feature development, UI redesign, or platform redevelopment. We require an independent team to validate that the platform is secure, stable, scalable, and ready for production deployment. About the Platform Solution is built using: Lovable React TypeScript Supabase PostgreSQL REST APIs Third-party integrations The application supports user onboarding, role-based access control, certificate issuance and verification, invoicing workflows, e-Invoice submission, reporting, and administration functions. What We Need We are looking for a team with strong experience in SaaS platforms, security testing, quality assurance, performance testing, and production readiness assessments. The selected team will be responsible for: 1. Independent Security Validation Penetration testing Authentication and authorization validation API security testing Privilege escalation testing Business workflow abuse testing Security retesting after remediation 2. Independent Functional Validation Validate critical workflows including: User registration and onboarding Login and account recovery Organization management User and role management Partner onboarding Certificate generation and verification Invoice generation E-Invoice submission Reporting and administrative functions 3. Automated End-to-End Testing Create or enhance automated E2E tests Playwright (preferred) or equivalent CI/CD execution Regression testing capability 4. Performance & Load Testing Load testing Stress testing Concurrent user testing Response time analysis Identification of performance bottlenecks 5. Backup & Recovery Validation Review backup procedures Execute backup restoration testing Validate recovery capability Confirm recoverability of critical platform data 6. Monitoring & Operational Readiness Review monitoring setup Review logging configuration Review alerting mechanisms Review production operational controls Validate readiness for live operation 7. Production Readiness Assessment Provide an independent assessment covering: Security Functionality Performance Stability Reliability Operational readiness Expected Deliverables Penetration Testing Report Security Findings Register Functional Validation Report UAT Sign-Off Automated Testing Report Performance & Load Testing Report Backup & Recovery Validation Report Operational Readiness Report Production Readiness Assessment Production Readiness Statement What Success Looks Like The engagement will be considered successful when: Critical business workflows have been independently validated. No unresolved critical security vulnerabilities remain. Performance testing demonstrates acceptable operating capacity. Backup and recovery procedures have been successfully tested. Monitoring and operational controls have been validated. User Acceptance Testing has been completed. The team is comfortable issuing a Production Readiness Statement. Required Experience Please apply only if you have experience with: SaaS applications Penetration testing QA automation Playwright Load and performance testing Supabase and PostgreSQL Cloud-hosted applications API testing Production readiness assessments Experience with FinTech, RegTech, Tax Technology, Compliance Platforms, or Government Technology solutions is highly desirable. Proposal Requirements Please include: Brief introduction of your team. Similar projects completed. Relevant case studies. Proposed approach and methodology. Estimated timeline. Fixed-price quotation. Sample deliverables where available. We are looking for a partner that can provide independent assurance that the platform is ready for live production use and can support a successful go-live.