Penetration test of a mobile and a web application to view various financial portfolios. Additionally, the configuration of the web application firewall in use was reviewed.