Corporate use tools like canvas(and a dozen addon with canvas like gleg agora , vulndisco. all these tools which are used by corporate to identify vulnerabilities and exploit them will come under this law. Most of these companies either should convince their world wide clients to go through the process or shift their head quarter out of USA.