Web application security audit (security check of an application and the VPN access)