Hi Matthew.

We do web application testing in-house and in most cases we tend to use specialised software for this kind of task, including reporting.  Know however that this sort of thing is not cheap and if done seriously can easily cost around 25-30K.  Of course it all depends on what you're after but this will give you an idea of the sort of stuff we do.

- Automated Web application scanning and testing for all common Web application vulnerabilities, including WASC threat classification - such as SQL-Injection, Cross-Site Scripting, and Buffer Overflow - and intelligent fix recommendations to ease remediation

- Broad application coverage, including integrated Web services scanning, JavaScript execution (including Ajax), and parsing

- Advanced remediation capabilities, including a comprehensive task list necessary to fix issues uncovered during the scan

- Security compliance reports, including PCI Data Security Standard, ISO 17799 and ISO 27001, HIPAA, GLBA, and Basel II

One company that I would recommend for software testing would be IBM UK but you might find them a bit expensive. I do no have another specific company to recommend though at the moment.

I hope this helps.

regards,

Denis
www.naxtech.com

Hi,

I'd think that this type of testring is merely done as part of the delivery process to the customer rather than a seperate service.  Is what you are looking for in essense an application tester?  If so, I do not have someone specific to recommend but I'd think that you'd be able to easily do this in-house.  ..unless you are looking for something too specific and specialised, but it does not sound like it.  Sorry I can't help any further.

regards,

Denis
www.naxtech.com

Hi,

We have worked with Deri from SciVisum before both here in the UK and in the Middle East for TheNational.ae Could not reccomend them highly enough.

Thanks

Chris