Hi, 
Security for web application concerns four level. 
1. Network security
2.Host security
3.Application security
4. Module security.

And check authentication, web config, encryption methods,
Coding standards for security purpose used.Sql injections
etc. should be consider.

Thanks,
Trupti Jethva
Quality Analyst