web platform security assessment