A software company runs a vulnerability scan and gets back a reassuring report. Nothing major shows up. Believing the customer portal is secure, the development