perform security testing