Web application security audit of a portal