Penetration test of an API used for buying/renting machines