Finding the problems alone can be a hell of a useful tool. Doubly so when you have decades of tech debt and a mess of a project.

It’s also proving the point that a lot of people hate to admit is right. That if you just flag every bug in vulnerability out to everyone everywhere immediately and you don’t hide it behind bureaucracy in Goodwill.

Then it actually forces people to fix things. Cuz you either fix things or you go under.

Companies have gotten so used to scaring and threatening people into hiding vulnerabilities for so long that it’s become normalized. It lets bad practices and insecurities flourish and multiply.

You either fix your s*** or you don’t have problems in the first place. Those are your two options now. No more of this b******* hiding.