services can result in unintentional vulnerabilities in the software that contains
them. Nor do they know how to recognize malicious logic that may have been
intentionally introduced into the code base by another developer.
30 Software Security Assurance State-of-the-Art Report (SOAR)