Web Application Penetration testing determines whether and how a malicious user can gain unauthorized access and exploit the vulnerabilities of a web application. This is a manual process that may include the use of vulnerability scanning or other automated tools, resulting in a comprehensive report with a description of each vulnerability verified and/or potential issue discovered. More specific risks that vulnerability may pose, including specific methods how and to what extent it may be exploited. Examples of vulnerabilities include but are not limited to SQL injection, privilege escalation, cross-site scripting, or deprecated protocols.