Because there are no details about the job (what are exactly your expectations, size of the application etc.) I presume it will be a typical pentest of small/mid-size web app. Over the Last 13 years I delivered hundreds (if not thousands) of tests like these for companies on four continents while working for four top profile pentesting companies (namely NCC Group, Trustwave, Securus Global, Telstra). My bid is based on zero knowledge about the app. Knowing some more details about the size, features, existing roles supported by the app etc. would allow me to better estimate the time effort required. Nevertheless, I believe that 5 days should be enough for an average app. The report would be with you within 1-3 days after the last day of testing (you don't pay for that time, it's for me to put it together). What you pay for is result, no bullshit, best skills & highest standards to meet your expectations. I'm flexible and willing to go down with the price (as a new member I'm mainly aiming for wins and positive reviews rather than $$$). Please let me know in case you would have any questions. Cheers.