Web application penetration test of an application for monitoring the power production of turbines. It was also assessed whether the product is suitable for purchase and internal further development or whether, from a security point of view, major efforts are still required.