How can we work on testing our own website for vulnerability?