Vulnerability management for an appsec world