selection and empanelment of professional agency for performing application and it infrastructure security audit in the state-- 1 category – i (static website/application)(developed in html/cms: wordpress/ drupal/ joomla/ dnn etc.) 2 website security audit – static website 3 category – ii (dynamic website/application)(developed primarily in cms/ core with front end: php/.net/java, etc.) 4 web application security audit – dynamic pages (1-10) – small 5 web application security audit – dynamic pages (11-30) – medium 6 web application security audit –dynamic pages (31-50) – enterprise 1 7 web application security audit –dynamic pages (51-100) – enterprise 2 8 web application security audit –dynamic pages (101- 200 forms) -enterprise 3 9 web application security audit –dynamic pages (>200 forms) -enterprise 4 10 category – iii (ios/android mobile application) 11 mobile application security audit dynamic pages (1-10) – small 12 mobile application security audit dynamic pages (11-20) – medium 13 mobile application security audit dynamic pages (21-30) – enterprise 1 14 mobile application security audit dynamic pages (>30) - enterprise2 15 category – iv (application programming interface (api)) - financial/banking 16 api security audit: (1-10) methods/ parameters – small 17 api security audit: (11-30) methods/ parameters – medium 18 api security audit: (31-60) methods/ parameters - enterprise 1 19 api security audit: (>60)methods/ parameters - enterprise 2 20 category-v (client systems) 21 laptop/desktop computer/virtual machine (as client system) – small category (up to 20 number of devices/ip) 22 laptop/desktop computer/virtual machine (as client system) – medium category (from 21 to 50 number of devices/ip) 23 laptop/desktop computer/virtual machine (as client system) – enterprise category (more than 51 number of devices/ip) 24 printer/scanner 25 category-vi (server/workstation systems) 26 server/workstation/virtual machine (as host system) 27 category-viinetworking devices 28 l2 switch/internet lease line router 29 l3 switch/video conferencing bridge (mcu) 30 wi-fi access point/router 31 category-viii security device/system 32 ddos/load balancer/apt 33 firewall/utm/waf/ips/ngfw 34 category-ix mobile device 35 mobile phone (android/ios) / tablet (android/ios)