Comprehensive web application security audit