Imperva’s analysis notes that conventional tools such as a WAF battle to detect API business-logic abuse, so[…]