Java app security tool