Standard penetration test of the web application and API