Which of the following can be used to detect a new application vulnerability on a website?
1) Penetration testing
2) Vulnerability scanning
3) Code review
4) Web application firewall