Penetration test on a small web application

I'm looking for a security professional to run a penetration test on one of my web applications (single domain, no mobile app). Scope: Black box, with a test account provided if needed OWASP Top 10, authentication and session handling, access control, common misconfigurations Non-destructive testing only, within the agreed scope Deliverable: A report listing findings by severity, with steps to reproduce and remediation advice A short retest once the fixes are deployed In your proposal, please include: A redacted sample report Your fixed price and estimated timeline The methodology and tools you use I'll share the domain and credentials after we agree on scope. NDA available on request.