Abstract: A method including generating scan results by executing a scan by a server web browser. The scan includes a behavior pattern that defines a simulated use of the server web browser to access a web service. Executing the scan includes causing the server web browser to access the web service according to the behavior pattern. The scan results include monitoring information generated by monitoring execution of the scan. The method also includes detecting, using the scan results, a vulnerability of data accessed during the simulated use of the server web browser. The method also includes determining, responsive to detecting the vulnerability, an access mode for the data. The method also includes applying the access mode to an attempt to access the data by the server web browser.