Application security audit of a portal