An orchestrator for security scanning web applications