We have created a site in SharePoint online for a customer. On high level following are the areas of customization: - Custom master pages - Bootstrap - Content Editor webparts with JS source files. - CQWP, XSLT customization, JSLink - Search, display templates - Designer workflows. - List views and list forms. - Query string parameters in navigation. No sandbox solution, no Apps.
Customer has requested us to do security vulnerability test for the application. We had used IBM AppScan in one of the earlier application for SharePoint 2013 OnPrem deployment, but it has reported issues in base product too. Request you to suggest a tool you might have used in earlier SharePoint 2013 Online projects. Also comment about licensing.