I mean language agnostic vuln management that’s capable of marking a particular subset of functionality as vulnerable like this is.