Vulnerability scanning

API scans can be performed manually or using automated tools. Automated tools can provide more comprehensive coverage and can be run more frequently. Manual scans can find vulnerabilities overlooked in the scanner.