Security assessment of a web distributed application