1 Penetration Testing Web Application Reviewing application code against the secure coding baseline and practices Review code developed in JAVA dot Net and