The Two Classes of Vulnerability: What Scanners Miss

The most useful way to sort vulnerabilities isn’t by severity, it’s by whether a tool can detect them at all. This one-page guide maps the two classes every AppSec team is working with, so you can see at a glance what your scanners own and where you’re still exposed.

Key takeaways:

• Why heuristic-detectable flaws like SQLi, XSS, and misconfigurations are a solved, table-stakes layer

• Why context-dependent flaws like BOLA/IDOR and auth bypass are the class that attackers exploit most

• What kind of testing it takes to catch the flaws scanners structurally can’t