What is included
Authentication and session management testing
Access control and business logic flaws
Injection and input handling issues
API and back-end service testing
Configuration and deployment review
Reproduction steps and fixes for every finding