Discovering dormant and zombie APIs is such an underrated capability. Most companies don't realize how dangerous they are until it's late. The offensive DAST approach makes this feel proactive rather than just compliance-driven.