Identify security weaknesses in web applications