Application security lab