- Respect rate limits - Global gentle `1s` (or so) delay - Delays based on last visits This could be done by implementing functions like `vulnerablecode.get(url...)`