Security audit consisting of an external vulnerability scan and penetration test