Tagged application-security-testing