Outsystems should provide a tool to Outsystems developers to ensure that all screens or Services are not accessible from the Outside world (or make developers aware when they are).
We use internal tools made in Outsystems to execute requests to each Webpage and Service to get respective responses and accesses.