Application security audits of a portal