Security audits for hosted shops