Security controls and web application firewall