drop rapid7 appsec export · parse attack vector + module + status · runs locally
drop rapid7 appsec export · local only
heuristic screener · vendor schema varies · not definitive proof