Is this useful for pentesting existing systems/infra, or is it only useful for a "review my project for bugs"?