A Buyer's Guide to Dynamic Scanning to Secure Web Applications