The Web Application testing would go under 200+ endpoint specific test cases classified into: 

1. Recon Phase 
2. Session Management Testing
3.  Authentication Checks 
4. Code Flaws 
5. Redirection Flaws 
6. Privilege Escalation Flaws 
7. OWASP Top 10 
8. SANS - 25 
9. Web Socket 
10. DDos Testing

Deliverables:  Some of the things we will be presenting to you after the completion of the assessment:  

• Data gathered during Scanning and Enumeration Phase 
• Attack test cases executed during the life cycle of Security Assessment. 
• The result of all the test cases (pass/failed) performed. 
• Vulnerabilities discovered or loopholes identified. 
• Story/details about successful attack path along with attack timeline. 
• Proof of vulnerabilities detected and successful exploitation. 
• Business and technical impact .
• Any custom scripts or proof of concepts developed for exploitation as part of the engagement.
• Recommendations to fix the issues/vulnerabilities. 
• VAPT Certificate ensuring that you are secure.