Configuration: Business Logic Vulnerability¶

Identifier: business_logic_agent

Scanner(s) Support¶

GraphQL Scanner	REST Scanner	WebApp Scanner	ASM Scanner

Description¶

Business logic vulnerabilities occur when applications enforce workflow rules incorrectly, allowing attackers to bypass intended restrictions or abuse application flows.

How we test: We use AI-powered analysis to explore application workflows, manipulate state transitions, and test for logic flaws such as price manipulation, race conditions, and authorization bypasses in business processes.

References:

https://owasp.org/www-community/vulnerabilities/Business_logic_vulnerability

Configuration¶

Example¶

Example configuration:

---
security_tests:
  business_logic_agent:
    skip: false

Reference¶

`skip`¶

Type : boolean

Skip the test if true.