Find, Inform of and Fix Security "Holes" on Magento Site

Recently our website hosted at Nexus was hacked.

It is a Magento cart with a theme placed on top of it. I think there is a twitter feed plugin as well.

SSL is TLS 1.2 128-Bit but doesn't appear to be over the whole site - just that specific to clients/purchases.

Website is not in CloudFare.

I need a Freelancer that is excellent at website security and if chosen this project might be re-made/upgraded to an NDA.

First the Freelancer will discover all of the security holes.

I want to know what specific hole (Injection [CSS/Java/XXS/SSI]), I want to know what specifically you typed where.

I'll be running though the same steps to reproduce the issue for our managers responsible for the site.

I want you to recommend and run analysis with websites to check for all holes.

I want to see these reports and again, show to management.

Once we have discovered all of the issues, I want the Freelancer to fix them.

Your bid should:

1) Be accurate for price and ETA

2) Tell me how you will complete this project

3) Let me know your availability / time zone

5) Say "Security" as the first word in your Bid

I am happy to PM the link to a select few I feel fit for this project.

For now, assume besides an SSL that nothing was really done for security.

Good luck. I'll contact you via PM if interested.

Thanks for your time.

An ninh Web

ID dự án: #5570165

Về dự án