External penetration test and comprehensive web application security audit