You will get a professional penetration testing followed with a report

For a start i will do the test in two phases: a manual security test and after that will do an automated test (with tools):

While manual tests benefit from the fact that the test is executed by a real, thinking person and therefore the quality of the test tends to be better to a degree; this approach doesn't scale well for larger pieces of software. Additionally, manual tests often provide inconsistent and difficult to verify results.

    • Using different browser add-ons (helping to confirm vulnerabilities)

    • Using reverse engineering tools and traffic test tools to confirm issues on web-app.

Automated tests on the other hand, are consistent and scale with very large application. Results are verifiable and easy to reproduce. The disadvantage of automated testing practices is that the rate of false-positives may be high and therefore the outcome of the test may not be particularly useful.

The best approach is often to combine automated and manual tests. Automated tests are very useful at the initial stages where the requirement is to cover as much area as possible. The results from the test are analyzed and manual investigation is performed in the areas that seem critical.