A Web application security device must understand the structure and usage of protected applications. This task can entail managing hundreds of thousands of constantly changing variables including users, URLs, directories, parameters, cookies, and HTTP methods. Imperva’s patented Dynamic Profiling technology completely automates the security management by learning application structure and usage with little or no manual tuning: this Technology Brief explains how Dynamic Profiling operates.