Web application penetration test of an external project management software as well as cloud hosting evaluation of security aspects when using this Software as a Service (SaaS) in a private cloud of the software provider