future of web application penetration testing