Active defense: introducing a stateful vulnerability scanner for APIs

https://blog.cloudflare.com/vulnerability-scanner/