1. A computer-implemented process for identifying a request invalidating a session, the computer-implemented process comprising: excluding all marked logout requests of a Web application; identifying a next portion of the Web application; crawling the identified next portion of the Web application; determining, in one instance, whether a state of a crawl is out of session; responsive to a determination, in one instance, that the state of the crawl is out of session, logging in to the Web application; selecting all crawl requests sent since a last time the crawl was in-session, excluding all marked logout requests; determining whether any requests remain; responsive to a determination that requests remain, selecting a next unprocessed request; crawling the selected next unprocessed request; determining whether, in a next instance, the state of the crawl is out of session; responsive to a determination, in the next instance, that state of the crawl is out of session, determining whether the selected request meets logout request criteria; and responsive to a determination that the selected request meets logout request criteria, marking the selected request as a logout request.