Cloud security penetration testing for SaaS companies