15.2 Does not allow spoofed high value transactionsΒΆ

Verify the application has business limits and correctly enforces on a per user basis, with configurable alerting and automated reactions to automated or unusual attack.

Levels: 2, 3