Active defense: introducing a stateful vulnerability scanner for APIs

Introduces Cloudflare's Web and API Vulnerability Scanner beta, a stateful DAST platform focused initially on BOLA detection for API Shield customers. The scanner leverages OpenAPI schemas and AI (Workers AI) to automatically construct scan plans by modeling API call graphs and inferring endpoint relationships. It differentiates from traditional DAST by integrating with Security Insights, utilizing existing API Discovery and Schema Learning knowledge, and enabling active verification of passive traffic inspection findings. The platform aims to simplify API security testing by reducing setup time and providing context-aware vulnerability reporting.