Comprehensive security audit of the web application, load test of the web application and server, standard penetration test of API and the web application standard penetration test