Run a security audit of a small SaaS