API Security and external vulnerability scanning