IT Security audit of a search API (internal network)