v5.2
February 12, 2026
Business logic testing, as a first-class scan type
Twenty-nine abuse patterns (race conditions, IDOR, price manipulation, workflow bypass) now run as their own scan phase, against the class of business logic flaw that has no CVE and no signature.
- 29 business logic abuse patterns
- Race condition detection with controlled concurrency
- IDOR testing across authenticated identities
- +1 more