Rate limiting
Rate controls bound repeated actions and resource use. Evaluating application-specific limits needs agreed scope; the passive scan does not stress-test them.
Separate review needed
This topic is educational. The current engine does not directly test it. Arrange a separately scoped review when you need to assess it.
Keep the scope.
A blocked or unfinished check remains unverified. Review technical recommendations with the person operating the website and test changes before applying them to a live service.
Read the full methodology