External Web Application and API Turbo Pentest Scoping