Security audit trading portals (penetration test of the web applications from the external view and coaching of the client’s project team)