Aura · Smart Scan
AI maps the app & its authorization model — the deterministic core proves every break · no LLM in the verdict
target: Retail Storefront API (sandbox)
▶ Run smart scan
Pipeline
Attack surface — live
probing
owns / suspect
confirmed break
correctly refused