Double standard penetration test of the web application