Looking for some good sources

[jeffrey rivero <jeffr76 () yahoo com>]

Hello all
we just got a contract to do a web application pen test.
being that we usually are responsible for the the network side of 
things. i was looking for some kind of website security audit proposal 
that i could use as a template/guide (all tho these customers have 
specific items that they want tested). i could just use my network 
proposal but would like to create a new on.
any one have a good source
J