Evaluates the security of web applications exposed to the internet or critical internal use by simulating attacker capabilities and potential outcomes.

Assesses the security of web services (e.g., SOAP, REST) accessible programmatically, identifying exploitable vulnerabilities and attack impact.