Web application penetration test of a wealth management system including a mobile application penetration test