Active defense: introducing a stateful vulnerability scanner for APIs

Cloudflare announced the beta of a Web and API Vulnerability Scanner for API Shield customers that initially targets OWASP API Top 10 BOLA issues. The post details how the scanner combines passive API schema learning and stateful DAST, uses Workers AI to infer API call graphs and data dependencies from OpenAPI specs, orchestrates scans with Temporal, secures credentials via HashiCorp Vault Transit, and surfaces findings in Security Insights.