https://protectonce.com/what-is-web-application-security-testing-why-its-hard-to-do-well/