Goes beyond finding bugs — produces a hardening plan that raises the baseline security posture of a system.