Cyber Security defence requires a realistic and thorough understanding of the current security challenges facing web applications. When applications are not properly tested and secured, cyber criminals are able to compromise them, damaging business continuity and stealing privileged information and data. Unfortunately, many organisations are naïve in thinking that a web application security scanner alone will reliably discover any flaws in their applications.