Application security audit of a corporate website