How to do application penetration testing with your current devs & QA team