Urgent Web Security Test Automation

I have a small web-based application that needs its security posture checked right away. The goal is to build an automated suite that performs penetration-style tests each time the app is deployed, flagging anything that could be exploited before it reaches production. Scope – The work is limited to security testing; I do not need functional or performance checks at this stage. – Within security, the emphasis is on penetration testing methods: automated discovery of common weaknesses (SQLi, XSS, auth bypass, misconfigurations) and clear proof-of-concept steps. Tech expectations Python with Selenium, Playwright, or a comparable headless browser tool is fine, and I’m open to OWASP ZAP or similar APIs if that speeds things up. Please wire the tests so they can be triggered from a simple CLI command and return actionable output (JSON or concise console log). Deliverables • Well-commented test scripts that I can run locally or in CI • A short README explaining setup, run command, and how to extend the suite • A brief findings report generated by the script on first execution Acceptance criteria The suite must complete a full run against my staging URL in under 15 minutes, exit with a non-zero code when a vulnerability is detected, and clean up any test data it creates. Timeline I need the first workable version within 48 hours so I can integrate it into our pipeline.