A system, comprising: a server hosting an application under test, AUT, and an observer; the observer configured to monitor instructions executed by the AUT; and a computing device communicatively coupled to the AUT and the observer through a common communication channel, the computing device comprising a processor and a memory device for storing computer-readable instructions configured to direct the processor to: send an application request to the AUT, wherein the application request is configured to expose a potential vulnerability of the AUT; receive an application response from the AUT in accordance with the AUT's programming; characterized by the instructions being configured to direct the processor to: send a service request to the observer; and receive a service response from the observer that contains information corresponding to the instructions executed by the AUT due to the application request, wherein the observer is configured to communicate with the computing device by adding a custom header to the application response, wherein communication between the observer and the computing device is implemented through the use of custom headers including said custom header, wherein the application request, application response, service request, and service response are communicated over the common communication channel. a server hosting an application under test, AUT, and an observer; the observer configured to monitor instructions executed by the AUT; and a computing device communicatively coupled to the AUT and the observer through a common communication channel, the computing device comprising a processor and a memory device for storing computer-readable instructions configured to direct the processor to: send an application request to the AUT, wherein the application request is configured to expose a potential vulnerability of the AUT; receive an application response from the AUT in accordance with the AUT's programming; characterized by the instructions being configured to direct the processor to: send a service request to the observer; and receive a service response from the observer that contains information corresponding to the instructions executed by the AUT due to the application request, wherein the observer is configured to communicate with the computing device by adding a custom header to the application response, wherein communication between the observer and the computing device is implemented through the use of custom headers including said custom header, wherein the application request, application response, service request, and service response are communicated over the common communication channel. send an application request to the AUT, wherein the application request is configured to expose a potential vulnerability of the AUT; receive an application response from the AUT in accordance with the AUT's programming; characterized by the instructions being configured to direct the processor to: send a service request to the observer; and receive a service response from the observer that contains information corresponding to the instructions executed by the AUT due to the application request, send a service request to the observer; and receive a service response from the observer that contains information corresponding to the instructions executed by the AUT due to the application request, wherein the observer is configured to communicate with the computing device by adding a custom header to the application response, wherein communication between the observer and the computing device is implemented through the use of custom headers including said custom header, wherein the application request, application response, service request, and service response are communicated over the common communication channel.