Comprehensive Protection Starts with VAPT, and Web Application Security Audits