Standard penetration testing of the hosting infrastructure - API security assessment - Authentication and authorization testing - Network segmentation evaluation