try to define the security & user privacy of web applications, like APIs' alert and associated configurations