Standard penetration tests of the web application and REST interfaces. Comprehensive web application security audits and security training