@mjg59 yes, especially with something like Raptor, which knows which tools to use for what and is quite happy to keep trying different approaches. In one instance, I was able to determine it would cost about $30 per 'exploitation' of a set of findings in a mature, security-critical body of code. That's not an exploit in common terms, but a working proof of a single bug in isolation. Note: I'm not an expert in this area, just using/building tooling to check my own work, so YMMV.