Application security audits of a CRM application, a customer portal and a SOAP interface plus penetration tests of the backend servers