One of the key challenges was obtaining API specifications to effectively scan newly discovered exposed API services for vulnerabilities. Our approach within Escape’s platform focused on two areas: Semantic Analysis—identifying essential code fragments using custom rules to optimize LLM prompts, and Specification Generation—leveraging the LLM to create precise OAS methods, with contextualization to resolve code dependencies and references for accuracy.