What is your motivation for having security testing done? Are you subject to regulatory requirements? Or are you just doing it for your own peace of mind?

What stage are you in the SDLC?

My email address is in my profile - happy to chat and help you figure out the best approach.