Standard web application penetration test, security audit of API interface, file server including local system security audit