Application security audit of three applications and penetration test of various related systems