Active defense: introducing a stateful vulnerability scanner for APIs
blog.cloudflare.com