All glossary terms
Glossary
Business logic abuse
Business logic abuse is exploiting how an application is designed to work (coupon rules, ticket queues, sign-up bonuses, inventory holds) rather than a technical vulnerability.
Examples include bots buying up concert tickets, scripts stacking discount codes, or fake accounts claiming sign-up credits. Every request looks valid on its own; the abuse is in the pattern.
These attacks hit revenue directly and vary by business, so generic WAF rules rarely catch them. Defenses need application context: which flows matter and what normal looks like.
Where Huskeys fits
Huskeys builds application profiles with business context, so rules can protect high-value flows like checkout and ticketing.
