Audit of a web application incl. configuration review